Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Adaptive Interface Connections' = 'C:\fzwhoknmx\ewqebnym.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Web Device Color Topology Transfer] 'ImagePath' = 'C:\fzwhoknmx\ewqebnym.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Web Device Color Topology Transfer] 'Start' = '00000002'
- 'C:\fzwhoknmx\nhtuvtcjlks.exe' "c:\fzwhoknmx\ewqebnym.exe"
- 'C:\fzwhoknmx\ewqebnym.exe'
- 'C:\fzwhoknmx\af2im5wagstghmdvmg.exe'
- C:\fzwhoknmx\ewqebnym.exe
- C:\fzwhoknmx\nhtuvtcjlks.exe
- C:\fzwhoknmx\lolygycf
- %WINDIR%\fzwhoknmx\vyyzr8bv
- C:\fzwhoknmx\vyyzr8bv
- C:\fzwhoknmx\af2im5wagstghmdvmg.exe
- C:\fzwhoknmx\nhtuvtcjlks.exe
- C:\fzwhoknmx\ewqebnym.exe
- C:\fzwhoknmx\af2im5wagstghmdvmg.exe
- %WINDIR%\fzwhoknmx\vyyzr8bv
- %WINDIR%\fzwhoknmx\vyyzr8bv
- '20#.#7.225.58':33073
- '19#.#47.86.10':25432
- '69.##1.140.58':36102
- '95.##7.243.188':49038
- '10#.#28.239.221':49777
- '84.##2.194.230':27426
- '24.##9.216.168':33794
- '81.##7.50.99':52074
- ClassName: 'Shell_TrayWnd' WindowName: ''