Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'classvc.exe' = '<SYSTEM32>\classvc.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'services ' = '%WINDIR%\services .exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svch0st' = '%PROGRAM_FILES%\svch0st.exe'
- <Имя диска съемного носителя>:\Data Penting.exe
- %WINDIR%\reedme.txt
- %PROGRAM_FILES%\svch0st.exe
- %WINDIR%\45+u++1.txt
- %WINDIR%\winxpsp2.sys
- C:\PCMAV.txt
- <SYSTEM32>\Rgstryxpsp2.exe
- %WINDIR%\services .exe
- %WINDIR%\svch0st.exe
- %WINDIR%\Regrsvc.exe
- <SYSTEM32>\classvc.exe