Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Registrar Services Volume Policy Tracking Link] 'Start' = '00000002'
- 'C:\cancgmn\aczapnmf.exe' "c:\cancgmn\cdvkepcftk.exe"
- 'C:\cancgmn\cdvkepcftk.exe'
- 'C:\cancgmn\kfbh87lgjfoouwvc9txpyq.exe'
- '<SYSTEM32>\wermgr.exe' "-queuereporting_svc" "C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cdvkepcftk.exe_b75885298d532a59e42aff1e1f44ac686e3a2_cab_1a11c84d"
- C:\cancgmn\cdvkepcftk.exe
- C:\cancgmn\aczapnmf.exe
- C:\cancgmn\omwpfhhtt
- %WINDIR%\cancgmn\bkomciixtn
- C:\cancgmn\bkomciixtn
- C:\cancgmn\kfbh87lgjfoouwvc9txpyq.exe
- C:\cancgmn\aczapnmf.exe
- C:\cancgmn\cdvkepcftk.exe
- C:\cancgmn\kfbh87lgjfoouwvc9txpyq.exe
- %WINDIR%\cancgmn\bkomciixtn
- C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cdvkepcftk.exe_b75885298d532a59e42aff1e1f44ac686e3a2_cab_1a11c84d\Report.wer.tmp в C:\ProgramData\Microsoft\Windows\WER\ReportQueue\AppCrash_cdvkepcftk.exe_b75885298d532a59e42aff1e1f44ac686e3a2_cab_1a11c84d\Report.wer
- DNS ASK ef####master.net
- DNS ASK th####hcontinue.net
- DNS ASK ef####wonder.net
- DNS ASK th####hmaster.net
- DNS ASK ef####continue.net
- DNS ASK wi####discover.net
- DNS ASK su####wonder.net
- DNS ASK su####discover.net
- DNS ASK dn#.##ftncsi.com
- ClassName: 'Shell_TrayWnd' WindowName: ''