Техническая информация
- [HKLM\System\CurrentControlSet\Services\] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [HKLM\SYSTEM\CurrentControlSet\Services\\Parameters] 'ServiceDLL' = '%WinDir%\jZQVjTzl.dll'
- '' <SYSTEM32>\svchost.exe -k netsvcs
- %WINDIR%\jzqvjtzl.dll