Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Presentation BranchCache Power' = 'C:\nuvmapgyrd\dupwtdli.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Encrypting Reporting WinHTTP] 'ImagePath' = 'C:\nuvmapgyrd\dupwtdli.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Encrypting Reporting WinHTTP] 'Start' = '00000002'
- 'C:\nuvmapgyrd\darudtd.exe' "c:\nuvmapgyrd\dupwtdli.exe"
- 'C:\nuvmapgyrd\dupwtdli.exe'
- 'C:\nuvmapgyrd\ru2k59fvhshh9xgga.exe'
- C:\nuvmapgyrd\dupwtdli.exe
- C:\nuvmapgyrd\darudtd.exe
- C:\nuvmapgyrd\forws1xl
- %WINDIR%\nuvmapgyrd\xnwjfqjhrw
- C:\nuvmapgyrd\xnwjfqjhrw
- C:\nuvmapgyrd\ru2k59fvhshh9xgga.exe
- C:\nuvmapgyrd\darudtd.exe
- C:\nuvmapgyrd\dupwtdli.exe
- C:\nuvmapgyrd\ru2k59fvhshh9xgga.exe
- %WINDIR%\nuvmapgyrd\xnwjfqjhrw
- %WINDIR%\nuvmapgyrd\xnwjfqjhrw
- '87.##.238.184':44724
- '18#.#49.85.10':32097
- '20#.#23.152.97':27682
- '18#.#5.131.224':26337
- '84.##2.194.230':27426
- '17#.#50.138.208':20422
- '73.##.228.84':36884
- '88.#48.36.4':25752
- ClassName: 'Shell_TrayWnd' WindowName: ''