Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\WebClient Auto BranchCache Update Locator Card] 'Start' = '00000002'
- 'C:\cjjyrurmnmwdcfg\dnhkpwlj.exe' "c:\cjjyrurmnmwdcfg\kpqidtohdot.exe"
- 'C:\cjjyrurmnmwdcfg\kpqidtohdot.exe'
- 'C:\cjjyrurmnmwdcfg\wf7uujcrt5drweepbnp.exe'
- C:\cjjyrurmnmwdcfg\kpqidtohdot.exe
- C:\cjjyrurmnmwdcfg\dnhkpwlj.exe
- C:\cjjyrurmnmwdcfg\vlejlgbof
- %WINDIR%\cjjyrurmnmwdcfg\tv3kqdof
- C:\cjjyrurmnmwdcfg\tv3kqdof
- C:\cjjyrurmnmwdcfg\wf7uujcrt5drweepbnp.exe
- C:\cjjyrurmnmwdcfg\dnhkpwlj.exe
- C:\cjjyrurmnmwdcfg\kpqidtohdot.exe
- C:\cjjyrurmnmwdcfg\wf7uujcrt5drweepbnp.exe
- %WINDIR%\cjjyrurmnmwdcfg\tv3kqdof
- DNS ASK re####esuccess.net
- DNS ASK or####uccess.net
- DNS ASK or###banker.net
- DNS ASK le###rfound.net
- DNS ASK re####ebanker.net
- DNS ASK re####espring.net
- DNS ASK or###found.net
- DNS ASK ne####arybanker.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK or###spring.net
- DNS ASK re####efound.net
- ClassName: 'Shell_TrayWnd' WindowName: ''