Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Mapper Logon DNS Authentication Debugger' = 'C:\tomfzkj\yewlvsm.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Source Alerts Information Input] 'ImagePath' = 'C:\tomfzkj\yewlvsm.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Source Alerts Information Input] 'Start' = '00000002'
- 'C:\tomfzkj\pvuohirna.exe' "c:\tomfzkj\yewlvsm.exe"
- 'C:\tomfzkj\yewlvsm.exe'
- 'C:\tomfzkj\jwb2x3fhuj9dvqw80tww.exe'
- C:\tomfzkj\yewlvsm.exe
- C:\tomfzkj\pvuohirna.exe
- C:\tomfzkj\uwgpqc01thd
- %WINDIR%\tomfzkj\vgzgslppdk
- C:\tomfzkj\vgzgslppdk
- C:\tomfzkj\jwb2x3fhuj9dvqw80tww.exe
- C:\tomfzkj\pvuohirna.exe
- C:\tomfzkj\yewlvsm.exe
- C:\tomfzkj\jwb2x3fhuj9dvqw80tww.exe
- %WINDIR%\tomfzkj\vgzgslppdk
- %WINDIR%\tomfzkj\vgzgslppdk
- '73.##.228.84':36884
- '94.##1.114.138':44254
- '95.##8.241.220':49038
- '82.##7.164.91':40801
- '20#.#23.152.97':27682
- '10#.#4.136.243':42581
- '10#.#24.230.242':49777
- '41.##8.41.238':29356
- '86.##5.10.227':45279
- '78.##5.171.93':23699
- '20#.#36.131.186':52293
- ClassName: 'Shell_TrayWnd' WindowName: ''