Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{2bf41072-b2b1-21c1-b5c1-0305f4155515}] 'StubPath' = '%WINDIR%\scvhost.exe Жф¶ЇАІ'
- [<HKLM>\SYSTEM\ControlSet001\Services\XPQSECL] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe ±Ј»¤ї©
- <SYSTEM32>\svchost.exe -k protect
- <SYSTEM32>\svchost.exe -k network
- <SYSTEM32>\svchost.exe
- %TEMP%\tmp1.tmp
- %TEMP%\tmp2.tmp
- %WINDIR%\_scvhost.exe
- %WINDIR%\scvhost.exe
- '18#.#15.48.128':5801