Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Program Storage Presentation Profile Windows List' = 'C:\emldehpzgmsdh\mgbvaxen.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wired Auto Tools Play Solutions] 'ImagePath' = 'C:\emldehpzgmsdh\mgbvaxen.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wired Auto Tools Play Solutions] 'Start' = '00000002'
- 'C:\emldehpzgmsdh\oqzqrwyy.exe' "c:\emldehpzgmsdh\mgbvaxen.exe"
- 'C:\emldehpzgmsdh\mgbvaxen.exe'
- 'C:\emldehpzgmsdh\imce02vzhpsnhsoqelo.exe'
- C:\emldehpzgmsdh\mgbvaxen.exe
- C:\emldehpzgmsdh\oqzqrwyy.exe
- C:\emldehpzgmsdh\z2set3v
- %WINDIR%\emldehpzgmsdh\bmyja3a
- C:\emldehpzgmsdh\bmyja3a
- C:\emldehpzgmsdh\imce02vzhpsnhsoqelo.exe
- C:\emldehpzgmsdh\oqzqrwyy.exe
- C:\emldehpzgmsdh\mgbvaxen.exe
- C:\emldehpzgmsdh\imce02vzhpsnhsoqelo.exe
- %WINDIR%\emldehpzgmsdh\bmyja3a
- %WINDIR%\emldehpzgmsdh\bmyja3a
- '18#.#38.249.34':37331
- '12#.#60.112.138':27440
- '93.##7.67.155':25640
- '19#.#6.240.249':21875
- '72.##1.207.62':22399
- '10#.#02.79.27':36272
- '20#.#95.172.22':41884
- '81.##4.87.112':37714
- '95.##8.241.220':49038
- '86.##5.10.227':45279
- '18#.#50.153.254':32097
- ClassName: 'Shell_TrayWnd' WindowName: ''