Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Framework Wired Offline Telephony RPC' = '%APPDATA%\ggkkuwdmt\ilbgbrj.exe'
- '%APPDATA%\ggkkuwdmt\psxgpjofdz.exe' "%APPDATA%\ggkkuwdmt\ilbgbrj.exe"
- '%APPDATA%\ggkkuwdmt\ilbgbrj.exe'
- %APPDATA%\ggkkuwdmt\ilbgbrj.hrade
- %APPDATA%\ggkkuwdmt\psxgpjofdz.exe
- %APPDATA%\ggkkuwdmt\ilbgbrj.exe
- %APPDATA%\ggkkuwdmt\ilbgbrj.exe
- DNS ASK we####rexplain.net
- DNS ASK am####bright.net
- DNS ASK am####explain.net
- DNS ASK am####instead.net
- DNS ASK we####rinstead.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'