Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Config Error Driver Browser Cryptographic' = 'C:\yldbgrujsnyib\fnckfiu.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\BitLocker Quality IPsec Store DCOM] 'ImagePath' = 'C:\yldbgrujsnyib\fnckfiu.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\BitLocker Quality IPsec Store DCOM] 'Start' = '00000002'
- 'C:\yldbgrujsnyib\pgkmtlvjw.exe' "c:\yldbgrujsnyib\fnckfiu.exe"
- 'C:\yldbgrujsnyib\fnckfiu.exe'
- 'C:\yldbgrujsnyib\gp2j4tbarvfiyzzdl.exe'
- C:\yldbgrujsnyib\fnckfiu.exe
- C:\yldbgrujsnyib\pgkmtlvjw.exe
- C:\yldbgrujsnyib\baesfgi
- %WINDIR%\yldbgrujsnyib\ayrblm
- C:\yldbgrujsnyib\ayrblm
- C:\yldbgrujsnyib\gp2j4tbarvfiyzzdl.exe
- C:\yldbgrujsnyib\pgkmtlvjw.exe
- C:\yldbgrujsnyib\fnckfiu.exe
- C:\yldbgrujsnyib\gp2j4tbarvfiyzzdl.exe
- %WINDIR%\yldbgrujsnyib\ayrblm
- %WINDIR%\yldbgrujsnyib\ayrblm
- '20#.#70.58.68':37727
- '79.##3.139.198':21201
- '11#.#18.187.28':42065
- '18#.2.4.92':44843
- '18#.#49.85.10':32097
- '82.##7.164.91':40801
- '10#.#02.79.27':36272
- '41.#6.20.41':48405
- ClassName: 'Shell_TrayWnd' WindowName: ''