Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hjgruionklvrdl] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\pyyueomtnvngrtfn] 'start' = '00000001'
- <SYSTEM32>\spoolsv.exe
- <DRIVERS>\pyyueomtnvngrtfn.sys
- <DRIVERS>\hjgruitqlvqybv.sys
- %TEMP%\purrxeibcj.tmp
- %TEMP%\wivsnpjulb.tmp