Техническая информация
- C:\2364.exe
- C:\ztbaomu.exe
- <SYSTEM32>\net1.exe stop cryptsvc
- <SYSTEM32>\taskkill.exe /f /im zhengtu.dat /T
- <SYSTEM32>\wbem\wmiadap.exe /R /T
- <SYSTEM32>\net.exe stop cryptsvc
- <SYSTEM32>\sc.exe config cryptsvc start= disabled
- <SYSTEM32>\sc.exe delete cryptsvc
- <SYSTEM32>\ksuser.dll
- C:\2364.exe
- C:\ztbaomu.exe
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''