Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Disk Device Reporting Collector Color Socket' = 'C:\hdshixyou\iefvrmjnyc.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Print Registry Smart Protected Call WWAN] 'ImagePath' = 'C:\hdshixyou\iefvrmjnyc.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Print Registry Smart Protected Call WWAN] 'Start' = '00000002'
- 'C:\hdshixyou\seotoehm.exe' "c:\hdshixyou\iefvrmjnyc.exe"
- 'C:\hdshixyou\iefvrmjnyc.exe'
- 'C:\hdshixyou\rjmb2vkazjfqevpff.exe'
- C:\hdshixyou\iefvrmjnyc.exe
- C:\hdshixyou\seotoehm.exe
- C:\hdshixyou\bchtzgkvhv
- %WINDIR%\hdshixyou\pfmzunk9ynas
- C:\hdshixyou\pfmzunk9ynas
- C:\hdshixyou\rjmb2vkazjfqevpff.exe
- C:\hdshixyou\seotoehm.exe
- C:\hdshixyou\iefvrmjnyc.exe
- C:\hdshixyou\rjmb2vkazjfqevpff.exe
- %WINDIR%\hdshixyou\pfmzunk9ynas
- %WINDIR%\hdshixyou\pfmzunk9ynas
- '81.##4.87.112':37714
- '10#.#29.186.201':47507
- '95.##.58.101':23245
- '61.##6.2.217':25840
- '20#.#7.225.58':33073
- '79.##7.196.121':45688
- '10#.#46.77.146':33927
- '91.##.35.122':26126
- '79.##3.139.198':21201
- '74.#5.64.25':22739
- '10#.#02.79.27':36272
- '77.##7.13.68':30018
- ClassName: 'Shell_TrayWnd' WindowName: ''