Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{004DF0D5-279A-4D7E-8996-2F2F76168A5D}' = ''
- <SYSTEM32>\cmd.exe /c %TEMP%\$uijmcvk3.bat
- elementclient.exe
- 360tray.exe
- ClassName: 'AVP.Tray' WindowName: ''
- %TEMP%\$uijmcvk3.bat
- <SYSTEM32>\<Имя вируса>xz.dll
- <SYSTEM32>\<Имя вируса>xz.dll
- ClassName: 'Q360SafeMonClass' WindowName: ''
- ClassName: 'KVXP_Monitor' WindowName: ''