Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\hjgruiwkxeyxjs] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\yfvkpylnqwbvtvpe] 'start' = '00000001'
- '<SYSTEM32>\spoolsv.exe'
- <DRIVERS>\yfvkpylnqwbvtvpe.sys
- <DRIVERS>\hjgruiaomkhboa.sys
- %TEMP%\dxvccrncwk.tmp
- %TEMP%\onnoismqip.tmp