Техническая информация
- [HKLM\SYSTEM\CurrentControlSet\Services\NvStreamKmd_dcrcv] 'ImagePath' = '%WINDIR%\Temp\DCRCVDrv.sys'
- 'NvStreamKmd_dcrcv' %WINDIR%\Temp\DCRCVDrv.sys
- %WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe
- <SYSTEM32>\securityhealthservice.exe
- %WINDIR%\temp\dcrcvdrv.sys
- 'ko##yk.shop':7688
- 'ca##gra.biz':4219
- DNS ASK ko##yk.shop
- DNS ASK di##iy.xyz
- DNS ASK ca##gra.biz
- '%WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe'
- '<SYSTEM32>\securityhealthservice.exe'