Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Fax Defragmenter Hardware Offline Event' = 'C:\eppoonmbrrddnj\cxqriydguifb.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Acquisition Procedure Video System Discovery] 'ImagePath' = 'C:\eppoonmbrrddnj\cxqriydguifb.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Acquisition Procedure Video System Discovery] 'Start' = '00000002'
- 'C:\eppoonmbrrddnj\dhwqzrqj.exe' "c:\eppoonmbrrddnj\cxqriydguifb.exe"
- 'C:\eppoonmbrrddnj\cxqriydguifb.exe'
- 'C:\eppoonmbrrddnj\xhh2oujr492nxaru5w1.exe'
- C:\eppoonmbrrddnj\cxqriydguifb.exe
- C:\eppoonmbrrddnj\dhwqzrqj.exe
- C:\eppoonmbrrddnj\nn9vvz
- %WINDIR%\eppoonmbrrddnj\femeiw571
- C:\eppoonmbrrddnj\femeiw571
- C:\eppoonmbrrddnj\xhh2oujr492nxaru5w1.exe
- C:\eppoonmbrrddnj\dhwqzrqj.exe
- C:\eppoonmbrrddnj\cxqriydguifb.exe
- C:\eppoonmbrrddnj\xhh2oujr492nxaru5w1.exe
- %WINDIR%\eppoonmbrrddnj\femeiw571
- %WINDIR%\eppoonmbrrddnj\femeiw571
- '11#.#6.137.96':49919
- '78.##5.171.93':23699
- '18#.#22.43.28':46084
- '73.##.228.84':36884
- '87.##.38.225':33631
- '15#.#82.245.137':33982
- '88.#48.36.4':25752
- '77.##7.13.68':30018
- '41.##8.41.238':29356
- '24.##9.216.168':33794
- '95.##8.241.220':49038
- ClassName: 'Shell_TrayWnd' WindowName: ''