Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Collector Support Initiator Agent Receiver] 'Start' = '00000002'
- 'C:\flqgtxytob\zqdsnypkfss.exe'
- 'C:\flqgtxytob\min7ledftjogqbj6.exe'
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_zqdsnypkfss.exe_cf3186cd601bec6b24dab7b6dadfcd28f6a25f7_cab_18b5cb0b"
- C:\flqgtxytob\min7ledftjogqbj6.exe
- C:\flqgtxytob\zqdsnypkfss.exe
- %WINDIR%\flqgtxytob\llzzcu
- C:\flqgtxytob\llzzcu
- C:\flqgtxytob\zqdsnypkfss.exe
- C:\flqgtxytob\min7ledftjogqbj6.exe
- %WINDIR%\flqgtxytob\llzzcu
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_zqdsnypkfss.exe_cf3186cd601bec6b24dab7b6dadfcd28f6a25f7_cab_18b5cb0b\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_zqdsnypkfss.exe_cf3186cd601bec6b24dab7b6dadfcd28f6a25f7_cab_18b5cb0b\Report.wer