Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hjgruibabbiyqb] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\qhosvmcptycbfsne] 'start' = '00000001'
- <SYSTEM32>\spoolsv.exe
- <DRIVERS>\qhosvmcptycbfsne.sys
- <DRIVERS>\hjgruirvwsntji.sys
- %TEMP%\pexfyrdivx.tmp
- %TEMP%\imuspuxpbv.tmp