Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'QDCknHsgrKILRJpANVRaHNGoFA' = '<SYSTEM32>\pgFCtPwPZFetNJ.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\System Check.lnk
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\pgFCtPwPZFetNJ.exe
- ClassName: 'GLjjXKslYqOuDsk' WindowName: 'goxPtedBoG'
- ClassName: 'BegZdrpZMnXf' WindowName: 'AKeNBhCcVOid'
- ClassName: 'RTvEuxKgLzfjVPFvz' WindowName: 'qeRDPTJchJZ'
- ClassName: 'vxVEXQJFqpvwvK' WindowName: 'omCRfjaUEpQrpofav'