Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hjgruijikhilti] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\ivtvpeqvtpysvjkq] 'start' = '00000001'
- <SYSTEM32>\spoolsv.exe
- <DRIVERS>\ivtvpeqvtpysvjkq.sys
- <DRIVERS>\hjgruitltqpxmy.sys
- %TEMP%\xetbvouqxp.tmp
- %TEMP%\hevbrnyyqx.tmp