Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SKYNETovbrpbwq] 'start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\qxxtpeqeornspeti] 'start' = '00000001'
- %TEMP%\vzmon.exe
- %TEMP%\swchost.exe
- <SYSTEM32>\spoolsv.exe
- %TEMP%\krtfnlbvgn.tmp
- <DRIVERS>\qxxtpeqeornspeti.sys
- <DRIVERS>\SKYNETgrobuygr.sys
- %TEMP%\pbdivsvraw.tmp
- %TEMP%\vzmon.exe
- %TEMP%\swchost.exe
- %TEMP%\gkcgyyfd.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''