Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Configuration CardSpace Receiver Keying' = 'C:\ghoywagwdh\sbpszqbyiipt.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Net.Tcp Sharing iSCSI KtmRm Disk Cache] 'ImagePath' = 'C:\ghoywagwdh\sbpszqbyiipt.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Net.Tcp Sharing iSCSI KtmRm Disk Cache] 'Start' = '00000002'
- 'C:\ghoywagwdh\uipiozb.exe' "c:\ghoywagwdh\sbpszqbyiipt.exe"
- 'C:\ghoywagwdh\sbpszqbyiipt.exe'
- 'C:\ghoywagwdh\hfvoo3c1mvywauynvl.exe'
- C:\ghoywagwdh\sbpszqbyiipt.exe
- C:\ghoywagwdh\uipiozb.exe
- C:\ghoywagwdh\qkc9jw
- %WINDIR%\ghoywagwdh\oxnrpqbfkhlt
- C:\ghoywagwdh\oxnrpqbfkhlt
- C:\ghoywagwdh\hfvoo3c1mvywauynvl.exe
- C:\ghoywagwdh\uipiozb.exe
- C:\ghoywagwdh\sbpszqbyiipt.exe
- C:\ghoywagwdh\hfvoo3c1mvywauynvl.exe
- %WINDIR%\ghoywagwdh\oxnrpqbfkhlt
- %WINDIR%\ghoywagwdh\oxnrpqbfkhlt
- '19#.#0.41.168':43832
- '19#.#7.134.20':44965
- '15#.#82.245.137':33982
- '18#.#5.131.224':26337
- '10#.#67.38.149':20466
- '79.##.202.44':23699
- '20#.#93.204.80':37195
- '92.##7.45.207':21921
- ClassName: 'Shell_TrayWnd' WindowName: ''