Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HomeGroup Publication Link Endpoint' = 'C:\zywjyxvm\tljmsemfldm.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\PNRP Remote Builder Bluetooth Enumerator] 'ImagePath' = 'C:\zywjyxvm\tljmsemfldm.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\PNRP Remote Builder Bluetooth Enumerator] 'Start' = '00000002'
- 'C:\zywjyxvm\whdiftyraj.exe' "c:\zywjyxvm\tljmsemfldm.exe"
- 'C:\zywjyxvm\tljmsemfldm.exe'
- 'C:\zywjyxvm\uewdg2gv7frxjrzk9rlld.exe'
- C:\zywjyxvm\tljmsemfldm.exe
- C:\zywjyxvm\whdiftyraj.exe
- C:\zywjyxvm\jaord4faqj
- %WINDIR%\zywjyxvm\nbowiznilxe8
- C:\zywjyxvm\nbowiznilxe8
- C:\zywjyxvm\uewdg2gv7frxjrzk9rlld.exe
- C:\zywjyxvm\whdiftyraj.exe
- C:\zywjyxvm\tljmsemfldm.exe
- C:\zywjyxvm\uewdg2gv7frxjrzk9rlld.exe
- %WINDIR%\zywjyxvm\nbowiznilxe8
- '2.##.19.50':35833
- '20#.#95.172.22':41884
- '17#.#50.138.208':20422
- '81.##4.87.112':37714
- '41.##8.41.238':29356
- '18#.#50.153.254':32097
- '31.##7.83.237':44843
- '22#.#1.110.45':48008
- '98.##.223.221':20922
- '73.##.228.84':36884
- '62.##1.108.194':20068
- ClassName: 'Shell_TrayWnd' WindowName: ''