Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Browser Detection Layer] 'Start' = '00000002'
- 'C:\guurwas\mrtuclfs.exe' "c:\guurwas\gagkeojkaaap.exe"
- 'C:\guurwas\gagkeojkaaap.exe'
- 'C:\guurwas\vopby8b1dfvvrzvhdfr.exe'
- C:\guurwas\gagkeojkaaap.exe
- C:\guurwas\mrtuclfs.exe
- C:\guurwas\gggszy9shxs
- %WINDIR%\guurwas\sfienlv
- C:\guurwas\sfienlv
- C:\guurwas\vopby8b1dfvvrzvhdfr.exe
- C:\guurwas\mrtuclfs.exe
- C:\guurwas\gagkeojkaaap.exe
- C:\guurwas\vopby8b1dfvvrzvhdfr.exe
- %WINDIR%\guurwas\sfienlv
- DNS ASK he###nevery.net
- DNS ASK le###revery.net
- DNS ASK he###single.net
- DNS ASK he###charge.net
- DNS ASK ge####single.net
- DNS ASK he####charge.net
- DNS ASK le####charge.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he#####ifference.net
- DNS ASK le#####ifference.net
- ClassName: 'Shell_TrayWnd' WindowName: ''