Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hfhshhfhfhfh.exe' = '%TEMP%\vcc\lci.exe %TEMP%\vcc\jlh-pkn'
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '%ProgramFiles%\%LocalAppData%\temp\vcc\lci.exe' %ProgramFiles%\%LocalAppData%\temp\vcc\FOXXR
- '%ProgramFiles%\%LocalAppData%\temp\vcc\lci.exe' jlh-pkn
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
- %ProgramFiles%\%LocalAppData%\temp\vcc\rtf.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\xfw.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\whw.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\otw.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\har.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\wam.mp4
- %ProgramFiles%\%LocalAppData%\temp\vcc\ivx.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\kju.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\ire.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\ccm.jpg
- %ProgramFiles%\%LocalAppData%\temp\vcc\qlw.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\lgm.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\von.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\ajj.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\xwl.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\iic.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\vcn.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\FOXXR
- %ProgramFiles%\%LocalAppData%\temp\vcc\eae.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\fkl.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\ior.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\xpu.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\lrl.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\utf.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\acp.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\bba.jpg
- %ProgramFiles%\%LocalAppData%\temp\vcc\wwi.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\dbj.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\hbf.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\cxq.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\cup.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\jwa.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\paf.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\qwd.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\lci.exe
- %ProgramFiles%\%LocalAppData%\temp\vcc\jlh-pkn
- %ProgramFiles%\%LocalAppData%\temp\vcc\eih.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\wjl.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\hjg.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\jul.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\ord.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\sig.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\etr.mp4
- %ProgramFiles%\%LocalAppData%\temp\vcc\let.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\fov.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\foe.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\rqf.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\hcg.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\xlp.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\pil.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\qtg.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\ivv.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\wpj.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\vax.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\qwd.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\qtg.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\qlw.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\sig.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\rtf.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\rqf.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\pil.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\lrl.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\lgm.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\let.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\paf.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\otw.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\ord.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\xfw.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\wwi.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\wpj.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\xwl.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\xpu.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\xlp.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\wjl.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\vcn.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\vax.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\utf.ico
- %ProgramFiles%\%LocalAppData%\temp\vcc\whw.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\wam.mp4
- %ProgramFiles%\%LocalAppData%\temp\vcc\von.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\lci.exe
- %ProgramFiles%\%LocalAppData%\temp\vcc\etr.mp4
- %ProgramFiles%\%LocalAppData%\temp\vcc\eih.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\eae.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\fov.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\foe.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\fkl.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\dbj.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\bba.jpg
- %ProgramFiles%\%LocalAppData%\temp\vcc\ajj.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\acp.txt
- %ProgramFiles%\%LocalAppData%\temp\vcc\cxq.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\cup.mp3
- %ProgramFiles%\%LocalAppData%\temp\vcc\ccm.jpg
- %ProgramFiles%\%LocalAppData%\temp\vcc\jlh-pkn
- %ProgramFiles%\%LocalAppData%\temp\vcc\ivx.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\ivv.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\kju.icm
- %ProgramFiles%\%LocalAppData%\temp\vcc\jwa.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\jul.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\ire.ppt
- %ProgramFiles%\%LocalAppData%\temp\vcc\hcg.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\hbf.pdf
- %ProgramFiles%\%LocalAppData%\temp\vcc\har.dat
- %ProgramFiles%\%LocalAppData%\temp\vcc\ior.bmp
- %ProgramFiles%\%LocalAppData%\temp\vcc\iic.docx
- %ProgramFiles%\%LocalAppData%\temp\vcc\hjg.dat
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''