Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WWAN Desktop Intelligent Sharing Alerts' = 'C:\pmchwfjqxjk\ytkskqmdv.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\UserMode Protocol Agent Encrypting] 'ImagePath' = 'C:\pmchwfjqxjk\ytkskqmdv.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\UserMode Protocol Agent Encrypting] 'Start' = '00000002'
- 'C:\pmchwfjqxjk\lxhnjblawz.exe' "c:\pmchwfjqxjk\ytkskqmdv.exe"
- 'C:\pmchwfjqxjk\ytkskqmdv.exe'
- 'C:\pmchwfjqxjk\xg2ftwezblo1egoquz.exe'
- C:\pmchwfjqxjk\ytkskqmdv.exe
- C:\pmchwfjqxjk\lxhnjblawz.exe
- C:\pmchwfjqxjk\ehxl5g
- %WINDIR%\pmchwfjqxjk\nimwdjyy6r
- C:\pmchwfjqxjk\nimwdjyy6r
- C:\pmchwfjqxjk\xg2ftwezblo1egoquz.exe
- C:\pmchwfjqxjk\lxhnjblawz.exe
- C:\pmchwfjqxjk\ytkskqmdv.exe
- C:\pmchwfjqxjk\xg2ftwezblo1egoquz.exe
- %WINDIR%\pmchwfjqxjk\nimwdjyy6r
- %WINDIR%\pmchwfjqxjk\nimwdjyy6r
- '98.##.223.221':20922
- '95.##8.241.220':49038
- '12#.#60.112.138':27440
- '11#.#18.187.28':42065
- '20#.#23.152.97':27682
- '21#.#07.110.82':26314
- '93.##7.67.155':25640
- '21#.#65.0.136':35711
- '10#.#46.77.146':33927
- '41.##.10.183':48405
- '18#.#39.139.100':37599
- '18#.#22.43.28':46084
- ClassName: 'Shell_TrayWnd' WindowName: ''