Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Shadow Distributed BitLocker WWAN' = 'C:\rnykpzdqfoc\enmgttcvi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\CNG Assistant Topology] 'ImagePath' = 'C:\rnykpzdqfoc\enmgttcvi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\CNG Assistant Topology] 'Start' = '00000002'
- 'C:\rnykpzdqfoc\qyakbuyjjukj.exe' "c:\rnykpzdqfoc\enmgttcvi.exe"
- 'C:\rnykpzdqfoc\enmgttcvi.exe'
- 'C:\rnykpzdqfoc\gd6sp2lr0ekjtdmqgyi.exe'
- C:\rnykpzdqfoc\enmgttcvi.exe
- C:\rnykpzdqfoc\qyakbuyjjukj.exe
- C:\rnykpzdqfoc\epxd9cfos
- %WINDIR%\rnykpzdqfoc\crxxunwa
- C:\rnykpzdqfoc\crxxunwa
- C:\rnykpzdqfoc\gd6sp2lr0ekjtdmqgyi.exe
- C:\rnykpzdqfoc\qyakbuyjjukj.exe
- C:\rnykpzdqfoc\enmgttcvi.exe
- C:\rnykpzdqfoc\gd6sp2lr0ekjtdmqgyi.exe
- %WINDIR%\rnykpzdqfoc\crxxunwa
- %WINDIR%\rnykpzdqfoc\crxxunwa
- '62.##.253.114':51156
- '86.##5.19.130':27743
- '11#.#42.143.147':31567
- '62.##1.108.194':20068
- '10#.#67.38.149':20466
- '24.##9.216.168':33794
- '79.##5.10.236':21201
- '18#.#55.161.27':20052
- ClassName: 'Shell_TrayWnd' WindowName: ''