Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Reports Web Driver Hardware' = 'C:\fwlggdebsghohrk\wmystemx.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Protection Input Information Engine] 'ImagePath' = 'C:\fwlggdebsghohrk\wmystemx.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Protection Input Information Engine] 'Start' = '00000002'
- 'C:\fwlggdebsghohrk\roudhzdepdpc.exe' "c:\fwlggdebsghohrk\wmystemx.exe"
- 'C:\fwlggdebsghohrk\wmystemx.exe'
- 'C:\fwlggdebsghohrk\ekto2fyopecwy4dd3.exe'
- C:\fwlggdebsghohrk\wmystemx.exe
- C:\fwlggdebsghohrk\roudhzdepdpc.exe
- C:\fwlggdebsghohrk\xo01nqijg8nc
- %WINDIR%\fwlggdebsghohrk\amnncduv
- C:\fwlggdebsghohrk\amnncduv
- C:\fwlggdebsghohrk\ekto2fyopecwy4dd3.exe
- C:\fwlggdebsghohrk\roudhzdepdpc.exe
- C:\fwlggdebsghohrk\wmystemx.exe
- C:\fwlggdebsghohrk\ekto2fyopecwy4dd3.exe
- %WINDIR%\fwlggdebsghohrk\amnncduv
- %WINDIR%\fwlggdebsghohrk\amnncduv
- '79.##7.196.121':45688
- '31.##7.83.237':44843
- '95.##8.241.220':49038
- '19#.#7.134.20':44965
- '20#.#36.131.186':52293
- '41.##8.41.238':29356
- '18#.#50.153.254':32097
- '62.##1.108.194':20068
- '10#.#29.186.201':47507
- '18#.#22.43.28':46084
- '98.##.223.221':20922
- '5.##.19.242':27426
- '12#.#60.112.138':27440
- ClassName: 'Shell_TrayWnd' WindowName: ''