Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Provider Source Gateway Virtual Scheduler' = 'C:\ykpxogh\hrjfjgg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Human Font UserMode Brightness Client] 'ImagePath' = 'C:\ykpxogh\hrjfjgg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Human Font UserMode Brightness Client] 'Start' = '00000002'
- 'C:\ykpxogh\hxqmkwiq.exe' "c:\ykpxogh\hrjfjgg.exe"
- 'C:\ykpxogh\hrjfjgg.exe'
- 'C:\ykpxogh\vzn2p5eltmbwu6fz.exe'
- C:\ykpxogh\hrjfjgg.exe
- C:\ykpxogh\hxqmkwiq.exe
- C:\ykpxogh\i6letph
- %WINDIR%\ykpxogh\hngwvcg3aq
- C:\ykpxogh\hngwvcg3aq
- C:\ykpxogh\vzn2p5eltmbwu6fz.exe
- C:\ykpxogh\hxqmkwiq.exe
- C:\ykpxogh\hrjfjgg.exe
- C:\ykpxogh\vzn2p5eltmbwu6fz.exe
- %WINDIR%\ykpxogh\hngwvcg3aq
- %WINDIR%\ykpxogh\hngwvcg3aq
- '41.#6.20.41':48405
- '98.##0.152.114':48605
- '10#.#02.79.27':36272
- '86.##5.19.130':27743
- '17#.#40.117.149':27603
- '18#.#49.88.79':32097
- '21#.#19.80.21':36542
- '15#.#82.245.137':33982
- ClassName: 'Shell_TrayWnd' WindowName: ''