Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'nhbbq' = '%APPDATA%\eayaxcqkdieui\agvsyjciptyuwl.exe "%TEMP%\hzxody.exe" "%HOMEPATH%\AppDa�'
- hzxody.exe
- %TEMP%\bambwmgwb.hx
- %TEMP%\avaujwweoog.aqh
- %TEMP%\hzxody.exe
- %TEMP%\yglxfybatp.au3
- %APPDATA%\eayaxcqkdieui\agvsyjciptyuwl.exe
- '%TEMP%\hzxody.exe' "%TEMP%\yglxfybatp.au3"