Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Compatibility Name Interface KtmRm] 'Start' = '00000002'
- 'C:\koykyrmmsy\rfbhnjzzqu.exe' "c:\koykyrmmsy\xsadunbpb.exe"
- 'C:\koykyrmmsy\xsadunbpb.exe'
- 'C:\koykyrmmsy\chuy8taqjvfqbbffo6c.exe'
- C:\koykyrmmsy\xsadunbpb.exe
- C:\koykyrmmsy\rfbhnjzzqu.exe
- C:\koykyrmmsy\ko9fbwlbpbqt
- %WINDIR%\koykyrmmsy\eslcth
- C:\koykyrmmsy\eslcth
- C:\koykyrmmsy\chuy8taqjvfqbbffo6c.exe
- C:\koykyrmmsy\rfbhnjzzqu.exe
- C:\koykyrmmsy\xsadunbpb.exe
- C:\koykyrmmsy\chuy8taqjvfqbbffo6c.exe
- %WINDIR%\koykyrmmsy\eslcth
- DNS ASK pl####ntspring.net
- DNS ASK ne####aryfound.net
- DNS ASK ne####aryspring.net
- DNS ASK ne#####rysuccess.net
- DNS ASK pl####ntsuccess.net
- DNS ASK pl####ntfound.net
- DNS ASK he####uccess.net
- DNS ASK di#####ltsuccess.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he###banker.net
- DNS ASK di####ultbanker.net
- ClassName: 'Shell_TrayWnd' WindowName: ''