Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Manager WebClient UserMode User-mode' = 'C:\yegffdlihfcv\xhmiyhn.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Authentication Parental Solutions] 'ImagePath' = 'C:\yegffdlihfcv\xhmiyhn.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Authentication Parental Solutions] 'Start' = '00000002'
- 'C:\yegffdlihfcv\rphkjihdufzl.exe' "c:\yegffdlihfcv\xhmiyhn.exe"
- 'C:\yegffdlihfcv\xhmiyhn.exe'
- 'C:\yegffdlihfcv\ceutw30s8hcjc2jnepi.exe'
- C:\yegffdlihfcv\xhmiyhn.exe
- C:\yegffdlihfcv\rphkjihdufzl.exe
- C:\yegffdlihfcv\bcblxgj
- %WINDIR%\yegffdlihfcv\luhf8l9rooj
- C:\yegffdlihfcv\luhf8l9rooj
- C:\yegffdlihfcv\ceutw30s8hcjc2jnepi.exe
- C:\yegffdlihfcv\rphkjihdufzl.exe
- C:\yegffdlihfcv\xhmiyhn.exe
- C:\yegffdlihfcv\ceutw30s8hcjc2jnepi.exe
- %WINDIR%\yegffdlihfcv\luhf8l9rooj
- %WINDIR%\yegffdlihfcv\luhf8l9rooj
- '2.##.167.151':22437
- '11#.#18.187.28':42065
- '18#.#42.73.242':26662
- '19#.#47.86.10':25432
- '19#.#0.96.220':41884
- '20#.#23.152.97':27682
- '17#.37.2.43':44303
- '24.##9.216.168':33794
- ClassName: 'Shell_TrayWnd' WindowName: ''