Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Name Portable CardSpace PC AutoConfig] 'Start' = '00000002'
- 'C:\txkeacfvad\xfediorruqge.exe' "c:\txkeacfvad\avyyovwrjmj.exe"
- 'C:\txkeacfvad\avyyovwrjmj.exe'
- 'C:\txkeacfvad\pz7lvpvlavaz6ogbh.exe'
- C:\txkeacfvad\avyyovwrjmj.exe
- C:\txkeacfvad\xfediorruqge.exe
- C:\txkeacfvad\doczmqvg
- %WINDIR%\txkeacfvad\waflzyz
- C:\txkeacfvad\waflzyz
- C:\txkeacfvad\pz7lvpvlavaz6ogbh.exe
- C:\txkeacfvad\xfediorruqge.exe
- C:\txkeacfvad\avyyovwrjmj.exe
- C:\txkeacfvad\pz7lvpvlavaz6ogbh.exe
- %WINDIR%\txkeacfvad\waflzyz
- DNS ASK hi####yfriend.net
- DNS ASK st####efriend.net
- DNS ASK am####laughter.net
- DNS ASK am###tfancy.net
- DNS ASK we####rlaughter.net
- DNS ASK hi####yconsider.net
- DNS ASK st####efancy.net
- DNS ASK hi####ylaughter.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK st####econsider.net
- DNS ASK hi####yfancy.net
- ClassName: 'Shell_TrayWnd' WindowName: ''