Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\uglteae] 'Start' = '00000000'
- '<SYSTEM32>\conhost.exe'
- '<SYSTEM32>\PING.EXE' -n 3 127.0.0.1
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\8Qi5sF.bat
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\rUmA.dll,DllRegisterServer
- '<SYSTEM32>\Rundll32.exe' <SYSTEM32>\rUmA.dll,DllUnregisterServer
- <DRIVERS>\wgxso.sys
- <SYSTEM32>\8Qi5sF.bat
- %APPDATA%\Roaming\Microsoft\Internet Explorer\Quick Launch\Жф¶Ї Internet Explorer дЇААЖч.lnk
- %HOMEPATH%\Favorites\¶·Р·УОП·Нш - 4000їоµҐ»ъУОП·Гв·СПВ.url
- <SYSTEM32>\rUmA.dll