Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Detection Thread Client Wired Themes] 'Start' = '00000002'
- 'C:\djtrnwh\htajzopivoxx.exe' "c:\djtrnwh\bkjbvukbjl.exe"
- 'C:\djtrnwh\bkjbvukbjl.exe'
- 'C:\djtrnwh\wrb8031lrvinpkbztumd.exe'
- C:\djtrnwh\bkjbvukbjl.exe
- C:\djtrnwh\htajzopivoxx.exe
- C:\djtrnwh\jnecc4g1
- %WINDIR%\djtrnwh\s6uemfhx
- C:\djtrnwh\s6uemfhx
- C:\djtrnwh\wrb8031lrvinpkbztumd.exe
- C:\djtrnwh\htajzopivoxx.exe
- C:\djtrnwh\bkjbvukbjl.exe
- C:\djtrnwh\wrb8031lrvinpkbztumd.exe
- %WINDIR%\djtrnwh\s6uemfhx
- DNS ASK pl####ntfound.net
- DNS ASK he###banker.net
- DNS ASK ne####aryfound.net
- DNS ASK ne####aryspring.net
- DNS ASK pl####ntspring.net
- DNS ASK di####ultbanker.net
- DNS ASK he###spring.net
- DNS ASK di####ultspring.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he####uccess.net
- DNS ASK di#####ltsuccess.net
- ClassName: 'Shell_TrayWnd' WindowName: ''