Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'TP Manager User-mode Framework' = 'C:\nujvwfrcaerjx\nwmabjmfrhh.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\WWAN List Auto-Discovery Volume Procedure] 'ImagePath' = 'C:\nujvwfrcaerjx\nwmabjmfrhh.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\WWAN List Auto-Discovery Volume Procedure] 'Start' = '00000002'
- 'C:\nujvwfrcaerjx\wajbysotied.exe' "c:\nujvwfrcaerjx\nwmabjmfrhh.exe"
- 'C:\nujvwfrcaerjx\nwmabjmfrhh.exe'
- 'C:\nujvwfrcaerjx\j3s2m9nuugyfgablb.exe'
- C:\nujvwfrcaerjx\nwmabjmfrhh.exe
- C:\nujvwfrcaerjx\wajbysotied.exe
- C:\nujvwfrcaerjx\wwnt0t
- %WINDIR%\nujvwfrcaerjx\utarap
- C:\nujvwfrcaerjx\utarap
- C:\nujvwfrcaerjx\j3s2m9nuugyfgablb.exe
- C:\nujvwfrcaerjx\wajbysotied.exe
- C:\nujvwfrcaerjx\nwmabjmfrhh.exe
- C:\nujvwfrcaerjx\j3s2m9nuugyfgablb.exe
- %WINDIR%\nujvwfrcaerjx\utarap
- %WINDIR%\nujvwfrcaerjx\utarap
- '18#.#0.243.3':25741
- '18#.#50.153.254':32097
- '21#.#7.168.28':52231
- '98.##.223.221':20922
- '87.##.38.225':33631
- '10#.#29.186.201':47507
- '41.##.10.183':48405
- '72.##1.207.62':22399
- '41.##2.44.224':45860
- '62.##1.108.194':20068
- '31.##7.83.237':44843
- '10#.#24.230.242':49777
- '5.##.19.242':27426
- ClassName: 'Shell_TrayWnd' WindowName: ''