Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\services\Resource User Manager Socket] 'Start' = '00000002'
- 'C:\udwxrnqrph\rycnhswgo.exe' "c:\udwxrnqrph\pxnxskwqu.exe"
- 'C:\udwxrnqrph\pxnxskwqu.exe'
- 'C:\udwxrnqrph\asuelturj4q2cn6b.exe'
- C:\udwxrnqrph\pxnxskwqu.exe
- C:\udwxrnqrph\rycnhswgo.exe
- C:\udwxrnqrph\zv9dwdavit1
- %WINDIR%\udwxrnqrph\aefdrws
- C:\udwxrnqrph\aefdrws
- C:\udwxrnqrph\asuelturj4q2cn6b.exe
- C:\udwxrnqrph\rycnhswgo.exe
- C:\udwxrnqrph\pxnxskwqu.exe
- C:\udwxrnqrph\asuelturj4q2cn6b.exe
- %WINDIR%\udwxrnqrph\aefdrws
- DNS ASK he###nevery.net
- DNS ASK le###revery.net
- DNS ASK he###single.net
- DNS ASK he###charge.net
- DNS ASK ge####single.net
- DNS ASK he####charge.net
- DNS ASK le####charge.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK he#####ifference.net
- DNS ASK le#####ifference.net
- ClassName: 'Shell_TrayWnd' WindowName: ''