Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Ordering Installer Smart Experience Procedure' = 'C:\qbympzky\gqgtpbq.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\AuthIP Reports Sharing] 'ImagePath' = 'C:\qbympzky\gqgtpbq.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\AuthIP Reports Sharing] 'Start' = '00000002'
- 'C:\qbympzky\juabjsvmnh.exe' "c:\qbympzky\gqgtpbq.exe"
- 'C:\qbympzky\gqgtpbq.exe'
- 'C:\qbympzky\lil2fjwnouzcglalto.exe'
- C:\qbympzky\gqgtpbq.exe
- C:\qbympzky\juabjsvmnh.exe
- C:\qbympzky\hazjnl
- %WINDIR%\qbympzky\klljf2
- C:\qbympzky\klljf2
- C:\qbympzky\lil2fjwnouzcglalto.exe
- C:\qbympzky\juabjsvmnh.exe
- C:\qbympzky\gqgtpbq.exe
- C:\qbympzky\lil2fjwnouzcglalto.exe
- %WINDIR%\qbympzky\klljf2
- %WINDIR%\qbympzky\klljf2
- '10#.#67.38.149':20466
- '20#.#11.99.94':37369
- '5.##.147.158':23144
- '62.##.253.114':51156
- '86.##5.219.12':21375
- '21#.#19.80.21':36542
- '18#.#39.124.68':37599
- '12#.#60.123.173':36805
- ClassName: 'Shell_TrayWnd' WindowName: ''