Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\WinRing0_1_2_0] 'ImagePath' = '%APPDATA%\Google\Libs\WR64.sys'
- 'WinRing0_1_2_0' %APPDATA%\Google\Libs\WR64.sys
- <SYSTEM32>\conhost.exe
- %WINDIR%\temp\udd39e4.tmp
- %WINDIR%\temp\udd39e4.tmp
- DNS ASK po##.#ashvault.pro