Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Experience Desktop Reports] 'Start' = '00000002'
- 'C:\wlqwiimj\vxyytzcmgzjn.exe' "c:\wlqwiimj\apiukjaarx.exe"
- 'C:\wlqwiimj\apiukjaarx.exe'
- 'C:\wlqwiimj\avlph9fxegtccaknjoexn.exe'
- C:\wlqwiimj\apiukjaarx.exe
- C:\wlqwiimj\vxyytzcmgzjn.exe
- C:\wlqwiimj\qkt7pvull0fb
- %WINDIR%\wlqwiimj\yhpux4f
- C:\wlqwiimj\yhpux4f
- C:\wlqwiimj\avlph9fxegtccaknjoexn.exe
- C:\wlqwiimj\vxyytzcmgzjn.exe
- C:\wlqwiimj\apiukjaarx.exe
- C:\wlqwiimj\avlph9fxegtccaknjoexn.exe
- %WINDIR%\wlqwiimj\yhpux4f
- DNS ASK he####ontinue.net
- DNS ASK di#####ltcontinue.net
- DNS ASK di####ultmaster.net
- DNS ASK di####ultwonder.net
- DNS ASK he###master.net
- DNS ASK gl####iscover.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK gl###master.net
- DNS ASK an####wonder.net
- DNS ASK an####discover.net
- DNS ASK gl###wonder.net
- ClassName: 'Shell_TrayWnd' WindowName: ''