Adware.SearchProtect

by ezclean posted Apr 09, 2021
?

단축키

Prev이전 문서

Next다음 문서

ESC닫기

크게 작게 위로 아래로 댓글로 가기 인쇄

Adware.SearchProtect
 

*file
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\bahvxfk
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\rfobmlpfqlovvawq
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\rpboobmlpfqlovvawq
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\pvpqbjobmlpfqlovvawq
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\bvxvbyxvaa.exe  - 8d833445874c4f66bcf227de6726cc84631a7413
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\mkfvxfk
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\ycfvxfk
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\pbqrmvbub
C:\Users\{USERNAME}\AppData\Local\bvxvbyxvaa\qokvxfk

 
*reg_key
HKEY_CLASSES_ROOT\Interface\{2170BCBA-E35C-42A5-9CDB-691334845FA4}
HKEY_CLASSES_ROOT\Interface\{23B8D468-7358-408C-B1AC-8BAE2A610C41}
HKLM\SOFTWARE\Classes\Interface\{23B8D468-7358-408C-B1AC-8BAE2A610C41}
HKLM\SOFTWARE\Classes\Interface\{2170BCBA-E35C-42A5-9CDB-691334845FA4}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EB4381F3-19CA-41FA-AFCA-0E9C147A41C1}
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\bvxvbyxvaa

11111.jpg