Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Connect WMI Trap Encrypting Key Locator' = 'C:\jccgbmfyppplnqu\utizfsyzupv.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Fax Upgrade Control Panel Auto Network] 'ImagePath' = 'C:\jccgbmfyppplnqu\utizfsyzupv.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Fax Upgrade Control Panel Auto Network] 'Start' = '00000002'
- 'C:\jccgbmfyppplnqu\pjfdaja.exe' "c:\jccgbmfyppplnqu\utizfsyzupv.exe"
- 'C:\jccgbmfyppplnqu\utizfsyzupv.exe'
- 'C:\jccgbmfyppplnqu\amz378vk7rt6z0v8objh.exe'
- C:\jccgbmfyppplnqu\utizfsyzupv.exe
- C:\jccgbmfyppplnqu\pjfdaja.exe
- C:\jccgbmfyppplnqu\vxgnppqx
- %WINDIR%\jccgbmfyppplnqu\bqbizjeu
- C:\jccgbmfyppplnqu\bqbizjeu
- C:\jccgbmfyppplnqu\amz378vk7rt6z0v8objh.exe
- C:\jccgbmfyppplnqu\pjfdaja.exe
- C:\jccgbmfyppplnqu\utizfsyzupv.exe
- C:\jccgbmfyppplnqu\amz378vk7rt6z0v8objh.exe
- %WINDIR%\jccgbmfyppplnqu\bqbizjeu
- %WINDIR%\jccgbmfyppplnqu\bqbizjeu
- '18#.2.4.92':44843
- '20#.#36.131.186':52293
- '88.#48.36.4':25752
- '83.##0.248.151':23268
- '92.##7.45.207':21921
- '37.##2.223.103':22969
- '72.#9.59.91':23362
- '69.##1.140.58':36102
- ClassName: 'Shell_TrayWnd' WindowName: ''