Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'QDCknHsgrKILRJpANVRaHNGoFA' = '<SYSTEM32>\pgFCtPwPZFetNJ.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\System Check.lnk
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\pgFCtPwPZFetNJ.exe
- ClassName: 'dzofQkrsqjM' WindowName: 'oHVNkePiwvLIc'
- ClassName: 'fLjymcKloL' WindowName: 'kggNHqJOF'
- ClassName: 'srwCPVsGjP' WindowName: 'vecDWIMrq'
- ClassName: 'hoflykZk' WindowName: 'peRQiBDhLxlJnhfCk'