Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ZV2Z8H] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'Start' = '00000002'
- '<SYSTEM32>\rundll32.exe' jqsbsvm1.3.dll,k1
- '<SYSTEM32>\rundll32.exe' jqsbsvm1.3.dll,eqtaaa
- '<SYSTEM32>\rundll32.exe' WIN32TXB2.dll,k1
- '<SYSTEM32>\rundll32.exe' WIN32TXB2.dll,eqtaaa
- %WINDIR%\Temp\ZV2Z8H.sys
- <SYSTEM32>\jqsbsvm1.3.dll
- <SYSTEM32>\win32txb2.dll
- %WINDIR%\Temp\ZV2Z8H.sys
- <SYSTEM32>\win32txb2.dll