Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Bus Extender Cache Encrypting' = 'C:\vsywzieg\cmhwwqdnsikc.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Peer Helper Problem Fax] 'ImagePath' = 'C:\vsywzieg\cmhwwqdnsikc.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Peer Helper Problem Fax] 'Start' = '00000002'
- 'C:\vsywzieg\txpazopkjo.exe' "c:\vsywzieg\cmhwwqdnsikc.exe"
- 'C:\vsywzieg\cmhwwqdnsikc.exe'
- 'C:\vsywzieg\qzcu2ntniojbgah0km.exe'
- C:\vsywzieg\cmhwwqdnsikc.exe
- C:\vsywzieg\txpazopkjo.exe
- C:\vsywzieg\ul2fss
- %WINDIR%\vsywzieg\nvy0jeujw2g
- C:\vsywzieg\nvy0jeujw2g
- C:\vsywzieg\qzcu2ntniojbgah0km.exe
- C:\vsywzieg\txpazopkjo.exe
- C:\vsywzieg\cmhwwqdnsikc.exe
- C:\vsywzieg\qzcu2ntniojbgah0km.exe
- %WINDIR%\vsywzieg\nvy0jeujw2g
- %WINDIR%\vsywzieg\nvy0jeujw2g
- '18#.#22.43.28':46084
- '18#.#42.145.105':26662
- '24.##9.216.168':33794
- '41.##2.44.224':45860
- '10#.#24.230.242':49777
- '19#.#47.86.10':25432
- '10#.#29.186.201':47507
- '12#.#60.123.173':36805
- '62.##.253.114':51156
- '11#.#18.187.28':42065
- '93.##7.67.155':25640
- ClassName: 'Shell_TrayWnd' WindowName: ''