Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Source PC Registrar SNMP Grouping Group VC' = 'C:\klvamrdldvcn\yuybgwf.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\iSCSI Builder Net.Tcp KtmRm] 'ImagePath' = 'C:\klvamrdldvcn\yuybgwf.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\iSCSI Builder Net.Tcp KtmRm] 'Start' = '00000002'
- 'C:\klvamrdldvcn\ciyvivistd.exe' "c:\klvamrdldvcn\yuybgwf.exe"
- 'C:\klvamrdldvcn\yuybgwf.exe'
- 'C:\klvamrdldvcn\vn32n5cmbsmo8gmad.exe'
- C:\klvamrdldvcn\yuybgwf.exe
- C:\klvamrdldvcn\ciyvivistd.exe
- C:\klvamrdldvcn\tuprzjo
- %WINDIR%\klvamrdldvcn\kuehbd
- C:\klvamrdldvcn\kuehbd
- C:\klvamrdldvcn\vn32n5cmbsmo8gmad.exe
- C:\klvamrdldvcn\ciyvivistd.exe
- C:\klvamrdldvcn\yuybgwf.exe
- C:\klvamrdldvcn\vn32n5cmbsmo8gmad.exe
- %WINDIR%\klvamrdldvcn\kuehbd
- %WINDIR%\klvamrdldvcn\kuehbd
- '73.##.228.84':36884
- '18#.#50.153.254':32097
- '10#.#29.186.201':47507
- '84.##8.128.25':27132
- '18#.#0.243.3':25741
- '31.##7.83.237':44843
- '24.##9.216.168':33794
- '19#.#6.240.249':21875
- '18#.#42.145.105':26662
- '62.##1.108.194':20068
- ClassName: 'Shell_TrayWnd' WindowName: ''