Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\msupdate] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\msupdate] 'ImagePath' = '<SYSTEM32>\msvcrtd.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\ntupdate] 'ImagePath' = '<SYSTEM32>\bkernel.sys'
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\bkernel.sys
- <SYSTEM32>\msvcrtd.exe
- <SYSTEM32>\bkernel.sys