Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Software Awareness Link-Layer' = 'C:\byofuyjokmp\xhbralyk.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Awareness Quality Audio KtmRm] 'ImagePath' = 'C:\byofuyjokmp\xhbralyk.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Awareness Quality Audio KtmRm] 'Start' = '00000002'
- 'C:\byofuyjokmp\utxwgjdyufq.exe' "c:\byofuyjokmp\xhbralyk.exe"
- 'C:\byofuyjokmp\xhbralyk.exe'
- 'C:\byofuyjokmp\w8mx2qyxipnihywd.exe'
- C:\byofuyjokmp\xhbralyk.exe
- C:\byofuyjokmp\utxwgjdyufq.exe
- C:\byofuyjokmp\r0ltti
- %WINDIR%\byofuyjokmp\uvbpclfmg
- C:\byofuyjokmp\uvbpclfmg
- C:\byofuyjokmp\w8mx2qyxipnihywd.exe
- C:\byofuyjokmp\utxwgjdyufq.exe
- C:\byofuyjokmp\xhbralyk.exe
- C:\byofuyjokmp\w8mx2qyxipnihywd.exe
- %WINDIR%\byofuyjokmp\uvbpclfmg
- %WINDIR%\byofuyjokmp\uvbpclfmg
- '12#.#60.123.173':36805
- '98.##.223.221':20922
- '18#.#23.70.113':37727
- '21#.#65.0.136':35711
- '2.##.19.50':35833
- '19#.#6.240.249':21875
- '86.#8.69.58':22437
- '19#.#7.134.20':44965
- '41.##2.44.224':45860
- '70.##2.38.96':41500
- '78.#7.87.58':21017
- '5.##.19.242':27426
- '17#.37.2.43':44303
- ClassName: 'Shell_TrayWnd' WindowName: ''