Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{00B45E6A-279A-4D7E-8996-2F2F76168A5D}' = ''
- <SYSTEM32>\cmd.exe /c "%TEMP%\$uijmcvk3.bat"
- elementclient.exe
- ClassName: 'AVP.Tray' WindowName: ''
- %TEMP%\$uijmcvk3.bat
- <SYSTEM32>\<Имя вируса>xz.dll
- <SYSTEM32>\<Имя вируса>xz.dll
- ClassName: 'Q360SafeMonClass' WindowName: ''
- ClassName: 'KVXP_Monitor' WindowName: ''