Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'JavaQuickStart' = '%WINDIR%\jre\jqs.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'smss.exe' = '<SYSTEM32>\krsr\smss.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\jre\jqs.exe' = '%WINDIR%\jre\jqs.exe:*:Enabled:JavaUpdate'
- '%TEMP%\tmp.exe'
- '%TEMP%\svchost.exe'
- <SYSTEM32>\krsr\smss.exe
- %WINDIR%\jre\jqs.exe
- %TEMP%\svchost.exe
- %TEMP%\tmp.exe