Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\System PNRP Port Policy Mapper Agent COM] 'Start' = '00000002'
- 'C:\ynoxtwxwx\cjoflictky.exe' "c:\ynoxtwxwx\pxtvksbwf.exe"
- 'C:\ynoxtwxwx\pxtvksbwf.exe'
- 'C:\ynoxtwxwx\jovgo8qmjxop4ny3y9qy.exe'
- C:\ynoxtwxwx\pxtvksbwf.exe
- C:\ynoxtwxwx\cjoflictky.exe
- C:\ynoxtwxwx\fxceznunqd
- %WINDIR%\ynoxtwxwx\qtu04zlmbyex
- C:\ynoxtwxwx\qtu04zlmbyex
- C:\ynoxtwxwx\jovgo8qmjxop4ny3y9qy.exe
- C:\ynoxtwxwx\cjoflictky.exe
- C:\ynoxtwxwx\pxtvksbwf.exe
- C:\ynoxtwxwx\jovgo8qmjxop4ny3y9qy.exe
- %WINDIR%\ynoxtwxwx\qtu04zlmbyex
- DNS ASK he###nevery.net
- DNS ASK le###revery.net
- DNS ASK he###single.net
- DNS ASK he###charge.net
- DNS ASK ge####single.net
- DNS ASK he####charge.net
- DNS ASK le####charge.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he#####ifference.net
- DNS ASK le#####ifference.net
- ClassName: 'Shell_TrayWnd' WindowName: ''