Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Tablet Machine TP Registrar Assistant] 'Start' = '00000002'
- 'C:\cwotiqcv\vxkpmnga.exe' "c:\cwotiqcv\bmlzxyfjfksc.exe"
- 'C:\cwotiqcv\bmlzxyfjfksc.exe'
- 'C:\cwotiqcv\csc8tc1yxtxatyaef.exe'
- C:\cwotiqcv\bmlzxyfjfksc.exe
- C:\cwotiqcv\vxkpmnga.exe
- C:\cwotiqcv\uf5f6gekp
- %WINDIR%\cwotiqcv\lavqnhrt
- C:\cwotiqcv\lavqnhrt
- C:\cwotiqcv\csc8tc1yxtxatyaef.exe
- C:\cwotiqcv\vxkpmnga.exe
- C:\cwotiqcv\bmlzxyfjfksc.exe
- C:\cwotiqcv\csc8tc1yxtxatyaef.exe
- %WINDIR%\cwotiqcv\lavqnhrt
- DNS ASK cl###supply.net
- DNS ASK th###supply.net
- DNS ASK th####istance.net
- DNS ASK th###office.net
- DNS ASK cl####istance.net
- DNS ASK we####rarrive.net
- DNS ASK am####office.net
- DNS ASK we####rdistance.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK am####arrive.net
- DNS ASK we####roffice.net
- ClassName: 'Shell_TrayWnd' WindowName: ''