Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdate435' = '%HOMEPATH%\JZLYS\WFRKI.vbs'
- '%HOMEPATH%\JZLYS\SROFR.exe' %HOMEPATH%\JZLYS\EZXDJ
- '%HOMEPATH%\JZLYS\SROFR.exe' %HOMEPATH%\JZLYS\VWBGX
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\JZLYS\WFRKI.vbs"
- %HOMEPATH%\JZLYS\WFRKI.vbs
- %HOMEPATH%\JZLYS\SROFR.exe
- %HOMEPATH%\JZLYS\EZXDJ
- %HOMEPATH%\JZLYS\VWBGX
- %HOMEPATH%\JZLYS\IQJZM
- %HOMEPATH%\JZLYS\IYXCW
- %HOMEPATH%\JZLYS\YMQGIX
- %HOMEPATH%\JZLYS\VWBGX
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'