Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Provider PC Problem Remote iSCSI Interactive] 'Start' = '00000002'
- 'C:\nbqbfrkbhgyqn\kfykwru.exe' "c:\nbqbfrkbhgyqn\wihqkujkceoq.exe"
- 'C:\nbqbfrkbhgyqn\wihqkujkceoq.exe'
- 'C:\nbqbfrkbhgyqn\eathahzo2t2vzyvibihlxw.exe'
- C:\nbqbfrkbhgyqn\wihqkujkceoq.exe
- C:\nbqbfrkbhgyqn\kfykwru.exe
- C:\nbqbfrkbhgyqn\in3i8ns7
- %WINDIR%\nbqbfrkbhgyqn\waphxp
- C:\nbqbfrkbhgyqn\waphxp
- C:\nbqbfrkbhgyqn\eathahzo2t2vzyvibihlxw.exe
- C:\nbqbfrkbhgyqn\kfykwru.exe
- C:\nbqbfrkbhgyqn\wihqkujkceoq.exe
- C:\nbqbfrkbhgyqn\eathahzo2t2vzyvibihlxw.exe
- %WINDIR%\nbqbfrkbhgyqn\waphxp
- DNS ASK ge#####anprobable.net
- DNS ASK al####ykitchen.net
- DNS ASK al####yprobable.net
- DNS ASK me###rwagon.net
- DNS ASK fo###wwagon.net
- DNS ASK ge#####ankitchen.net
- DNS ASK al####ywagon.net
- DNS ASK ge####manwagon.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK al####ywithout.net
- DNS ASK ge#####anwithout.net
- ClassName: 'Shell_TrayWnd' WindowName: ''