Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Control Browser System Routing Launcher Networking] 'Start' = '00000002'
- 'C:\tyrygijibtcrvbs\cgadxea.exe' "c:\tyrygijibtcrvbs\hhicebc.exe"
- 'C:\tyrygijibtcrvbs\hhicebc.exe'
- 'C:\tyrygijibtcrvbs\eu9ginzghx8jeu.exe'
- C:\tyrygijibtcrvbs\hhicebc.exe
- C:\tyrygijibtcrvbs\cgadxea.exe
- C:\tyrygijibtcrvbs\kuzqxpy5p
- %WINDIR%\tyrygijibtcrvbs\ob0afu
- C:\tyrygijibtcrvbs\ob0afu
- C:\tyrygijibtcrvbs\eu9ginzghx8jeu.exe
- C:\tyrygijibtcrvbs\cgadxea.exe
- C:\tyrygijibtcrvbs\hhicebc.exe
- C:\tyrygijibtcrvbs\eu9ginzghx8jeu.exe
- %WINDIR%\tyrygijibtcrvbs\ob0afu
- DNS ASK pl####ntfound.net
- DNS ASK he###banker.net
- DNS ASK ne####aryfound.net
- DNS ASK ne####aryspring.net
- DNS ASK pl####ntspring.net
- DNS ASK di####ultbanker.net
- DNS ASK he###spring.net
- DNS ASK di####ultspring.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he####uccess.net
- DNS ASK di#####ltsuccess.net
- ClassName: 'Shell_TrayWnd' WindowName: ''