Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Disk WWAN Socket Redirector' = 'C:\ksllesduwwckgsx\ztmiwepohogi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Auto-Discovery Transfer Key Application] 'ImagePath' = 'C:\ksllesduwwckgsx\ztmiwepohogi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Auto-Discovery Transfer Key Application] 'Start' = '00000002'
- 'C:\ksllesduwwckgsx\rrstcoaipl.exe' "c:\ksllesduwwckgsx\ztmiwepohogi.exe"
- 'C:\ksllesduwwckgsx\ztmiwepohogi.exe'
- 'C:\ksllesduwwckgsx\sfjej2lw7jnbhe3bssx.exe'
- C:\ksllesduwwckgsx\ztmiwepohogi.exe
- C:\ksllesduwwckgsx\rrstcoaipl.exe
- C:\ksllesduwwckgsx\udtxgq
- %WINDIR%\ksllesduwwckgsx\e2ezzzrzjh
- C:\ksllesduwwckgsx\e2ezzzrzjh
- C:\ksllesduwwckgsx\sfjej2lw7jnbhe3bssx.exe
- C:\ksllesduwwckgsx\rrstcoaipl.exe
- C:\ksllesduwwckgsx\ztmiwepohogi.exe
- C:\ksllesduwwckgsx\sfjej2lw7jnbhe3bssx.exe
- %WINDIR%\ksllesduwwckgsx\e2ezzzrzjh
- %WINDIR%\ksllesduwwckgsx\e2ezzzrzjh
- '79.##5.10.236':21201
- '2.##.167.151':22437
- '20#.#11.99.94':37369
- '67.##.64.252':27314
- '80.##1.86.158':33631
- '18#.#49.88.79':32097
- '11#.#18.187.28':42065
- '94.##1.114.138':44254
- ClassName: 'Shell_TrayWnd' WindowName: ''