Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Authentication WLAN Computer Builder' = 'C:\wewfgrvl\wqnzkpfplny.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Alerts Transaction Gateway] 'ImagePath' = 'C:\wewfgrvl\wqnzkpfplny.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Alerts Transaction Gateway] 'Start' = '00000002'
- 'C:\wewfgrvl\iyelzqomai.exe' "c:\wewfgrvl\wqnzkpfplny.exe"
- 'C:\wewfgrvl\wqnzkpfplny.exe'
- 'C:\wewfgrvl\wbc2gp5jwyzshvg3.exe'
- C:\wewfgrvl\wqnzkpfplny.exe
- C:\wewfgrvl\iyelzqomai.exe
- C:\wewfgrvl\eku1krtei
- %WINDIR%\wewfgrvl\dl9gxqmz
- C:\wewfgrvl\dl9gxqmz
- C:\wewfgrvl\wbc2gp5jwyzshvg3.exe
- C:\wewfgrvl\iyelzqomai.exe
- C:\wewfgrvl\wqnzkpfplny.exe
- C:\wewfgrvl\wbc2gp5jwyzshvg3.exe
- %WINDIR%\wewfgrvl\dl9gxqmz
- %WINDIR%\wewfgrvl\dl9gxqmz
- '18#.#50.153.254':32097
- '79.##3.139.198':21201
- '41.##.10.183':48405
- ClassName: 'Shell_TrayWnd' WindowName: ''