Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Office Publication PNRP Resource Storage] 'Start' = '00000002'
- 'C:\lgeubdu\jbibvkmcur.exe' "c:\lgeubdu\cvtpuroxe.exe"
- 'C:\lgeubdu\cvtpuroxe.exe'
- 'C:\lgeubdu\tvr9g3wzurtc5wqlg.exe'
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cvtpuroxe.exe_9236663ebb8525212844319a18c3462a957b5af6_cab_16af0424"
- C:\lgeubdu\cvtpuroxe.exe
- C:\lgeubdu\jbibvkmcur.exe
- C:\lgeubdu\pwrofs
- %WINDIR%\lgeubdu\wfqop1vyz
- C:\lgeubdu\wfqop1vyz
- C:\lgeubdu\tvr9g3wzurtc5wqlg.exe
- C:\lgeubdu\jbibvkmcur.exe
- C:\lgeubdu\cvtpuroxe.exe
- C:\lgeubdu\tvr9g3wzurtc5wqlg.exe
- %WINDIR%\lgeubdu\wfqop1vyz
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cvtpuroxe.exe_9236663ebb8525212844319a18c3462a957b5af6_cab_16af0424\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cvtpuroxe.exe_9236663ebb8525212844319a18c3462a957b5af6_cab_16af0424\Report.wer
- DNS ASK re####believe.net
- DNS ASK el####icbranch.net
- DNS ASK el####icbelieve.net
- DNS ASK el####icreceive.net
- DNS ASK re####receive.net
- DNS ASK la####uarter.net
- DNS ASK ca####nreceive.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK re####branch.net
- DNS ASK ca####nquarter.net
- ClassName: 'Shell_TrayWnd' WindowName: ''