Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Secure Grouping Enumerator Key AutoConfig' = 'C:\sfuzokreomewtxk\rldcwstomku.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\AuthIP Credential Protected Ordering] 'ImagePath' = 'C:\sfuzokreomewtxk\rldcwstomku.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\AuthIP Credential Protected Ordering] 'Start' = '00000002'
- 'C:\sfuzokreomewtxk\hbpmmdkuouqa.exe' "c:\sfuzokreomewtxk\rldcwstomku.exe"
- 'C:\sfuzokreomewtxk\rldcwstomku.exe'
- 'C:\sfuzokreomewtxk\x1g52yjxi8zfdnxf.exe'
- C:\sfuzokreomewtxk\rldcwstomku.exe
- C:\sfuzokreomewtxk\hbpmmdkuouqa.exe
- C:\sfuzokreomewtxk\x4ur8gvc
- %WINDIR%\sfuzokreomewtxk\u5gipeabi
- C:\sfuzokreomewtxk\u5gipeabi
- C:\sfuzokreomewtxk\x1g52yjxi8zfdnxf.exe
- C:\sfuzokreomewtxk\hbpmmdkuouqa.exe
- C:\sfuzokreomewtxk\rldcwstomku.exe
- C:\sfuzokreomewtxk\x1g52yjxi8zfdnxf.exe
- %WINDIR%\sfuzokreomewtxk\u5gipeabi
- %WINDIR%\sfuzokreomewtxk\u5gipeabi
- '2.##.19.50':35833
- '10#.#46.77.146':33927
- '18#.#38.249.34':37331
- '10#.#4.136.243':42581
- '86.##5.10.227':45279
- '77.##7.13.68':30018
- '61.##6.2.217':25840
- '41.##8.41.238':29356
- '20#.#95.172.22':41884
- '10#.#24.230.242':49777
- '86.#8.69.58':22437
- '84.##8.128.25':27132
- ClassName: 'Shell_TrayWnd' WindowName: ''