Technical Information
- [<HKLM>\System\CurrentControlSet\Services\SPP Event Network List ActiveX] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\SPP Event Network List ActiveX] 'ImagePath' = '%WINDIR%\bnfslkjdd.exe'
- [<HKLM>\System\CurrentControlSet\Services\IKEEXT] 'Start' = '00000002'
- Windows Security Center
- '%WINDIR%\syswow64\netsh.exe' firewall set opmode disable
- %WINDIR%\juuqobdehllp\tst
- %TEMP%\hxmxqhgeoyr3fuqtuqsvz7shh.exe
- %WINDIR%\bnfslkjdd.exe
- %WINDIR%\lgepdlif.exe
- %WINDIR%\juuqobdehllp\rng
- %WINDIR%\juuqobdehllp\run
- %WINDIR%\juuqobdehllp\cfg
- %WINDIR%\temp\hxmxqhgfy8bohuqtuq.exe
- %WINDIR%\bnfslkjdd.exe
- %WINDIR%\lgepdlif.exe
- %TEMP%\hxmxqhgeoyr3fuqtuqsvz7shh.exe
- %WINDIR%\temp\hxmxqhgfy8bohuqtuq.exe
- http://18#.#17.73.77/index.php
- http://da###ome.net/index.php
- http://mo###uch.net/index.php
- http://su###ytoday.net/index.php
- http://ca###oday.net/index.php
- http://qu###seven.net/index.php
- http://th###today.net/index.php
- http://th###ome.net/index.php
- http://da##some.ru/index.php
- http://th###some.net/index.php
- http://da###ood.net/index.php
- http://cl###food.net/index.php
- http://si###eet.net/index.php
- http://si###ood.net/index.php
- http://qu###food.net/index.php
- http://qu###meet.net/index.php
- http://qu###neck.net/index.php
- http://me###eet.net/index.php
- http://wi###eel.net/index.php
- http://si###guide.net/index.php
- http://si###body.net/index.php
- http://mi###alf.net/index.php
- http://cl###only.net/index.php
- http://cl###color.net/index.php
- http://da###eel.net/index.php
- http://mo###igh.net/index.php
- http://qu###high.net/index.php
- http://he###igh.net/index.php
- http://qu###food.ru/index.php
- http://cl###body.net/index.php
- http://tr###high.net/index.php
- http://cl###dance.net/index.php
- http://da###ance.net/index.php
- http://mo###ance.net/index.php
- http://su###ydance.net/index.php
- http://th###ody.net/index.php
- http://th###tell.net/index.php
- http://cl###some.net/index.php
- http://cl###today.net/index.php
- http://he###hown.net/index.php
- http://ro###ome.net/index.php
- http://ha###ver.net/index.php
- http://we###rain.net/index.php
- http://we###old.net/index.php
- http://mu###home.net/index.php
- http://hu###home.net/index.php
- http://mu###over.net/index.php
- http://hu###gold.net/index.php
- http://sp###over.net/index.php
- http://ha###old.net/index.php
- http://ha###ome.net/index.php
- http://of####uesday.net/index.php
- http://ro###ouse.net/index.php
- http://se####berpeace.net/index.php
- http://de###ouse.net/index.php
- http://lo####thepings.ru/index.php
- http://ri###nstorm.net/index.php
- http://se####berhouse.net/index.php
- http://cl###born.net/index.php
- http://da###each.net/index.php
- http://ro###ver.net/index.php
- http://me###rice.net/index.php
- http://cl###raise.net/index.php
- http://cl###reach.net/index.php
- http://wi###each.net/index.php
- http://wi###rice.net/index.php
- http://mi###each.net/index.php
- http://mi###rice.net/index.php
- http://he###ood.net/index.php
- http://mi###rice.ru/index.php
- http://mo###loth.net/index.php
- http://su###ycloth.net/index.php
- http://qu###born.net/index.php
- http://wi###ift.net/index.php
- http://he###aid.net/index.php
- http://ca###aid.net/index.php
- http://de###ver.net/index.php
- http://de##home.ru/index.php
- http://ca###alf.net/index.php
- DNS ASK ca###hown.ru
- DNS ASK mo###oday.net
- DNS ASK su###ysuch.net
- DNS ASK mo##such.ru
- DNS ASK mo###uch.net
- DNS ASK me###ome.net
- DNS ASK si###ome.net
- DNS ASK me###even.net
- DNS ASK si###even.net
- DNS ASK me###oday.ru
- DNS ASK me###oday.net
- DNS ASK si###oday.net
- DNS ASK me###uch.net
- DNS ASK si###uch.net
- DNS ASK cl###some.net
- DNS ASK da##some.ru
- DNS ASK su###ytoday.net
- DNS ASK he###even.net
- DNS ASK mo###even.net
- DNS ASK su###yseven.ru
- DNS ASK he###oday.net
- DNS ASK ca###uch.net
- DNS ASK he###uch.net
- DNS ASK qu###some.ru
- DNS ASK qu###some.net
- DNS ASK th###ome.net
- DNS ASK qu###seven.net
- DNS ASK th###even.net
- DNS ASK qu###today.net
- DNS ASK th###oday.ru
- DNS ASK th###oday.net
- DNS ASK qu###such.net
- DNS ASK th###uch.net
- DNS ASK su###ysome.net
- DNS ASK mo###ome.net
- DNS ASK su###yseven.net
- DNS ASK ca###oday.net
- DNS ASK da###ome.net
- DNS ASK da###oday.net
- DNS ASK du##body.ru
- DNS ASK du###ody.net
- DNS ASK wi###ell.net
- DNS ASK du###ell.net
- DNS ASK th###dare.net
- DNS ASK si###dare.net
- DNS ASK mi###even.ru
- DNS ASK th###dance.ru
- DNS ASK si###dance.net
- DNS ASK th###body.net
- DNS ASK si###body.net
- DNS ASK th###tell.net
- DNS ASK si###tell.ru
- DNS ASK si###tell.net
- DNS ASK du###ance.net
- DNS ASK wi###ody.net
- DNS ASK da###even.net
- DNS ASK cl###seven.net
- DNS ASK wi###are.net
- DNS ASK cl###such.ru
- DNS ASK cl###such.net
- DNS ASK da###uch.net
- DNS ASK mi###are.net
- DNS ASK tr###dare.net
- DNS ASK mi###ance.net
- DNS ASK tr###dance.ru
- DNS ASK tr###dance.net
- DNS ASK mi###ody.net
- DNS ASK tr###body.net
- DNS ASK mi###ell.net
- DNS ASK tr###tell.net
- DNS ASK wi##dare.ru
- DNS ASK du###are.net
- DNS ASK cl###today.net
- DNS ASK wi###ance.net
- DNS ASK he###even.ru
- DNS ASK ca###even.net
- DNS ASK he###ome.net
- DNS ASK su###yfood.net
- DNS ASK mo###ood.net
- DNS ASK su###ymeet.ru
- DNS ASK su###ymeet.net
- DNS ASK mo###eet.net
- DNS ASK me###eck.net
- DNS ASK si###eck.net
- DNS ASK me###hown.net
- DNS ASK si###hown.ru
- DNS ASK si###hown.net
- DNS ASK me###ood.net
- DNS ASK si###ood.net
- DNS ASK me###eet.net
- DNS ASK si###eet.net
- DNS ASK su###yshown.net
- DNS ASK cl###neck.ru
- DNS ASK mo###eck.net
- DNS ASK su###yneck.net
- DNS ASK he###hown.net
- DNS ASK ca###ood.net
- DNS ASK he###ood.net
- DNS ASK ca###eet.net
- DNS ASK he##meet.ru
- DNS ASK he###eet.net
- DNS ASK qu###neck.net
- DNS ASK th###eck.net
- DNS ASK qu###shown.net
- DNS ASK th###hown.net
- DNS ASK qu###food.ru
- DNS ASK qu###food.net
- DNS ASK th###ood.net
- DNS ASK qu###meet.net
- DNS ASK th###eet.net
- DNS ASK mo##neck.ru
- DNS ASK cl###neck.net
- DNS ASK mo###hown.net
- DNS ASK da###eck.net
- DNS ASK wi###oday.net
- DNS ASK wi###uch.net
- DNS ASK du###uch.net
- DNS ASK th###some.net
- DNS ASK si###some.ru
- DNS ASK si###some.net
- DNS ASK th###seven.net
- DNS ASK si###seven.net
- DNS ASK th###today.net
- DNS ASK si###today.net
- DNS ASK th###such.ru
- DNS ASK th###such.net
- DNS ASK si###such.net
- DNS ASK ca###ome.net
- DNS ASK wi###oday.ru
- DNS ASK wi###even.net
- DNS ASK du###oday.net
- DNS ASK du###even.net
- DNS ASK du###ome.net
- DNS ASK cl###shown.net
- DNS ASK cl###food.net
- DNS ASK da##food.ru
- DNS ASK da###ood.net
- DNS ASK cl###meet.net
- DNS ASK da###eet.net
- DNS ASK mi###ome.net
- DNS ASK ca###are.net
- DNS ASK th###dance.net
- DNS ASK tr###some.net
- DNS ASK tr###seven.net
- DNS ASK mi###oday.net
- DNS ASK tr###today.net
- DNS ASK mi###uch.net
- DNS ASK tr###such.ru
- DNS ASK tr###such.net
- DNS ASK da###hown.net
- DNS ASK mi###even.net
- DNS ASK he###are.net
- DNS ASK ca###ance.net
- DNS ASK he###ance.net
- DNS ASK su###ycolor.ru
- DNS ASK su###ycolor.net
- DNS ASK mo###olor.net
- DNS ASK su###yonly.net
- DNS ASK mo###nly.net
- DNS ASK me###eel.net
- DNS ASK si##feel.ru
- DNS ASK si###eel.net
- DNS ASK me###igh.net
- DNS ASK si###igh.net
- DNS ASK me###olor.net
- DNS ASK si###olor.net
- DNS ASK me##only.ru
- DNS ASK me###nly.net
- DNS ASK si###nly.net
- DNS ASK mo###igh.net
- DNS ASK cl###feel.net
- DNS ASK su###yhigh.net
- DNS ASK su###yfeel.net
- DNS ASK ca###olor.net
- DNS ASK he###olor.ru
- DNS ASK he###olor.net
- DNS ASK ca###nly.net
- DNS ASK he###nly.net
- DNS ASK qu###feel.net
- DNS ASK th###eel.net
- DNS ASK qu###high.ru
- DNS ASK qu###high.net
- DNS ASK th###igh.net
- DNS ASK qu###color.net
- DNS ASK th###olor.net
- DNS ASK qu###only.net
- DNS ASK th##only.ru
- DNS ASK th###nly.net
- DNS ASK mo###eel.net
- DNS ASK da###eel.net
- DNS ASK cl###high.net
- DNS ASK da##high.ru
- DNS ASK du###uide.net
- DNS ASK wi###ate.net
- DNS ASK du##late.ru
- DNS ASK du###ate.net
- DNS ASK th###half.net
- DNS ASK si###half.net
- DNS ASK ca###hown.net
- DNS ASK th###name.net
- DNS ASK th###guide.ru
- DNS ASK th###guide.net
- DNS ASK si###guide.net
- DNS ASK th###late.net
- DNS ASK si###late.net
- DNS ASK ca###alf.net
- DNS ASK du###ame.net
- DNS ASK wi###uide.net
- DNS ASK wi###ame.net
- DNS ASK wi##name.ru
- DNS ASK du###alf.net
- DNS ASK cl###color.net
- DNS ASK da###olor.net
- DNS ASK cl###only.net
- DNS ASK da###nly.net
- DNS ASK mi##half.ru
- DNS ASK mi###alf.net
- DNS ASK he###igh.net
- DNS ASK mi###ame.net
- DNS ASK tr###half.net
- DNS ASK mi###uide.net
- DNS ASK tr###guide.ru
- DNS ASK tr###guide.net
- DNS ASK mi###ate.net
- DNS ASK tr###late.net
- DNS ASK wi###alf.net
- DNS ASK da###igh.net
- DNS ASK tr###name.net
- DNS ASK mi###igh.net
- DNS ASK ca###igh.net
- DNS ASK si###high.ru
- DNS ASK mo###ance.net
- DNS ASK su###ybody.net
- DNS ASK mo###ody.net
- DNS ASK su###ytell.net
- DNS ASK mo###ell.net
- DNS ASK me##dare.ru
- DNS ASK me###are.net
- DNS ASK si###are.net
- DNS ASK me###ance.net
- DNS ASK si###ance.net
- DNS ASK me###ody.net
- DNS ASK si###ody.net
- DNS ASK me###ell.net
- DNS ASK si##body.ru
- DNS ASK si###ell.net
- DNS ASK mo###ance.ru
- DNS ASK cl###dare.net
- DNS ASK su###ydance.net
- DNS ASK su###ydare.net
- DNS ASK ca##body.ru
- DNS ASK ca###ody.net
- DNS ASK he###ody.net
- DNS ASK ca###ell.net
- DNS ASK he###ell.net
- DNS ASK qu###dare.net
- DNS ASK th##dare.ru
- DNS ASK th###are.net
- DNS ASK qu###dance.net
- DNS ASK th###ance.net
- DNS ASK qu###body.net
- DNS ASK th###ody.net
- DNS ASK qu###tell.ru
- DNS ASK qu###tell.net
- DNS ASK th###ell.net
- DNS ASK mo###are.net
- DNS ASK da###are.net
- DNS ASK cl###dance.ru
- DNS ASK cl###dance.net
- DNS ASK du###olor.net
- DNS ASK wi##only.ru
- DNS ASK wi###nly.net
- DNS ASK du###nly.net
- DNS ASK th###feel.net
- DNS ASK si###feel.net
- DNS ASK ca###eel.net
- DNS ASK th###high.net
- DNS ASK si###high.net
- DNS ASK th###color.net
- DNS ASK si###color.net
- DNS ASK th###only.net
- DNS ASK si###only.net
- DNS ASK ca##feel.ru
- DNS ASK du###igh.net
- DNS ASK wi###olor.net
- DNS ASK wi###igh.net
- DNS ASK du###eel.net
- DNS ASK du##feel.ru
- DNS ASK cl###body.net
- DNS ASK da###ody.net
- DNS ASK cl###tell.net
- DNS ASK da##tell.ru
- DNS ASK da###ell.net
- DNS ASK mi###eel.net
- DNS ASK he###eel.net
- DNS ASK he##half.ru
- DNS ASK tr###feel.net
- DNS ASK mi###olor.ru
- DNS ASK mi###olor.net
- DNS ASK tr###color.net
- DNS ASK mi###nly.net
- DNS ASK tr###only.net
- DNS ASK wi###eel.net
- DNS ASK da###ance.net
- DNS ASK tr###high.net
- DNS ASK si###name.net
- DNS ASK he###alf.net
- DNS ASK th###shown.net
- DNS ASK jo###rain.net
- DNS ASK wi###rain.net
- DNS ASK jo###old.net
- DNS ASK wi###old.net
- DNS ASK de##home.ru
- DNS ASK de###ome.net
- DNS ASK ro###ome.net
- DNS ASK de###ver.net
- DNS ASK ro###ver.net
- DNS ASK de###rain.net
- DNS ASK ro###rain.ru
- DNS ASK ro###rain.net
- DNS ASK de###old.net
- DNS ASK ro###old.net
- DNS ASK wr###home.net
- DNS ASK wi###ver.net
- DNS ASK sp###gold.net
- DNS ASK wi##over.ru
- DNS ASK wi###ome.net
- DNS ASK of###home.net
- DNS ASK fr###over.net
- DNS ASK of###over.net
- DNS ASK fr###grain.ru
- DNS ASK fr###grain.net
- DNS ASK of###grain.net
- DNS ASK fr###gold.net
- DNS ASK of###gold.net
- DNS ASK se####berhome.ru
- DNS ASK se####berhome.net
- DNS ASK se####berover.net
- DNS ASK se####bergrain.net
- DNS ASK ha##gold.ru
- DNS ASK se####bergold.net
- DNS ASK jo###ome.net
- DNS ASK jo###ver.net
- DNS ASK fr###home.net
- DNS ASK ma###ome.net
- DNS ASK wr###grain.net
- DNS ASK wi###ugust.net
- DNS ASK du###ugust.net
- DNS ASK wi##born.ru
- DNS ASK wi###orn.net
- DNS ASK du###orn.net
- DNS ASK th###cloth.net
- DNS ASK wr###peace.net
- DNS ASK si###cloth.net
- DNS ASK si###paid.ru
- DNS ASK si###paid.net
- DNS ASK th###august.net
- DNS ASK si###august.net
- DNS ASK th###born.net
- DNS ASK si###born.net
- DNS ASK wi###aid.net
- DNS ASK du###aid.net
- DNS ASK wr###over.net
- DNS ASK wr###over.ru
- DNS ASK wi###loth.net
- DNS ASK ma###rain.net
- DNS ASK wr###gold.net
- DNS ASK ma##gold.ru
- DNS ASK ma###old.net
- DNS ASK mi###loth.net
- DNS ASK tr###cloth.net
- DNS ASK mi###aid.net
- DNS ASK tr###paid.net
- DNS ASK mi###ugust.ru
- DNS ASK mi###ugust.net
- DNS ASK tr###august.net
- DNS ASK mi###orn.net
- DNS ASK tr###born.net
- DNS ASK du###loth.ru
- DNS ASK ma###ver.net
- DNS ASK du###loth.net
- DNS ASK sp###gold.ru
- DNS ASK we###old.net
- DNS ASK sp###grain.net
- DNS ASK wi###ouse.net
- DNS ASK jo##gift.ru
- DNS ASK jo###ift.net
- DNS ASK wi###ift.net
- DNS ASK jo###uesday.net
- DNS ASK wi###uesday.net
- DNS ASK jo###eace.net
- DNS ASK wi###eace.ru
- DNS ASK wi###eace.net
- DNS ASK de###ouse.net
- DNS ASK ro###ouse.net
- DNS ASK de###ift.net
- DNS ASK ro###ift.net
- DNS ASK de###uesday.ru
- DNS ASK se####berpeace.net
- DNS ASK de###uesday.net
- DNS ASK ha###eace.net
- DNS ASK se####bertuesday.ru
- DNS ASK ri###nstorm.net
- DNS ASK lo####thepings.ru
- DNS ASK fr###gift.net
- DNS ASK of###gift.ru
- DNS ASK of###gift.net
- DNS ASK fr####uesday.net
- DNS ASK of####uesday.net
- DNS ASK fr###peace.net
- DNS ASK of###peace.net
- DNS ASK ha###ouse.ru
- DNS ASK ha###ouse.net
- DNS ASK se####berhouse.net
- DNS ASK ha###ift.net
- DNS ASK se####bergift.net
- DNS ASK ha###uesday.net
- DNS ASK se#####ertuesday.net
- DNS ASK ro###uesday.net
- DNS ASK jo###ouse.net
- DNS ASK de###eace.net
- DNS ASK ya###ome.net
- DNS ASK ya###ver.net
- DNS ASK mu###over.net
- DNS ASK ya###rain.net
- DNS ASK mu###grain.ru
- DNS ASK mu###grain.net
- DNS ASK ya###old.net
- DNS ASK mu###gold.net
- DNS ASK we###ome.net
- DNS ASK sp###home.net
- DNS ASK we##over.ru
- DNS ASK we###ver.net
- DNS ASK sp###over.net
- DNS ASK we###rain.net
- DNS ASK ya##home.ru
- DNS ASK hu###gold.net
- DNS ASK mu###home.net
- DNS ASK ha###old.net
- DNS ASK ha###rain.net
- DNS ASK ro###eace.net
- DNS ASK ma###ouse.ru
- DNS ASK ma###ouse.net
- DNS ASK wr###gift.net
- DNS ASK ma###ift.net
- DNS ASK wr####uesday.net
- DNS ASK ma###uesday.net
- DNS ASK ca###loth.ru
- DNS ASK th###paid.net
- DNS ASK wr###peace.ru
- DNS ASK hu###home.net
- DNS ASK ha###ome.net
- DNS ASK hu###over.net
- DNS ASK ha##over.ru
- DNS ASK ha###ver.net
- DNS ASK hu###grain.net
- DNS ASK wr###house.net
- DNS ASK ma###eace.net
- DNS ASK ca###loth.net
- DNS ASK he###loth.net
- DNS ASK ca###aid.net
- DNS ASK mo###roud.net
- DNS ASK su###yraise.net
- DNS ASK mo###aise.ru
- DNS ASK mo###aise.net
- DNS ASK su###yreach.net
- DNS ASK mo###each.net
- DNS ASK me###rice.net
- DNS ASK si###rice.net
- DNS ASK me###roud.ru
- DNS ASK me###roud.net
- DNS ASK si###roud.net
- DNS ASK me###aise.net
- DNS ASK si###aise.net
- DNS ASK me###each.net
- DNS ASK si###each.ru
- DNS ASK su###ycroud.net
- DNS ASK si###each.net
- DNS ASK mo###rice.net
- DNS ASK su###yprice.ru
- DNS ASK he###roud.net
- DNS ASK ca###aise.net
- DNS ASK he###aise.net
- DNS ASK ca###each.ru
- DNS ASK ca###each.net
- DNS ASK he###each.net
- DNS ASK qu###price.net
- DNS ASK th###rice.net
- DNS ASK qu###croud.net
- DNS ASK th###roud.ru
- DNS ASK th###roud.net
- DNS ASK qu###raise.net
- DNS ASK th###aise.net
- DNS ASK qu###reach.net
- DNS ASK th###each.net
- DNS ASK su###yprice.net
- DNS ASK cl###price.net
- DNS ASK da###rice.net
- DNS ASK cl###croud.net
- DNS ASK wi###ood.net
- DNS ASK du###ood.net
- DNS ASK wi###eet.net
- DNS ASK du###eet.net
- DNS ASK th###neck.ru
- DNS ASK th###neck.net
- DNS ASK he###eck.net
- DNS ASK si###neck.net
- DNS ASK si###shown.net
- DNS ASK th###food.net
- DNS ASK si###food.ru
- DNS ASK si###food.net
- DNS ASK th###meet.net
- DNS ASK si###meet.net
- DNS ASK du###hown.ru
- DNS ASK du###hown.net
- DNS ASK wi###hown.net
- DNS ASK du###eck.net
- DNS ASK wi###eck.net
- DNS ASK cl###raise.ru
- DNS ASK cl###raise.net
- DNS ASK da###aise.net
- DNS ASK cl###reach.net
- DNS ASK da###each.net
- DNS ASK mi###eck.net
- DNS ASK ca###roud.net
- DNS ASK tr###neck.net
- DNS ASK tr###neck.ru
- DNS ASK tr###shown.net
- DNS ASK mi###ood.net
- DNS ASK tr###food.net
- DNS ASK mi##meet.ru
- DNS ASK mi###eet.net
- DNS ASK tr###meet.net
- DNS ASK da###roud.net
- DNS ASK mi###hown.net
- DNS ASK tr###price.net
- DNS ASK he###rice.net
- DNS ASK th###croud.net
- DNS ASK mo###aid.net
- DNS ASK su###yaugust.ru
- DNS ASK su####august.net
- DNS ASK mo###ugust.net
- DNS ASK su###yborn.net
- DNS ASK mo###orn.net
- DNS ASK me###loth.net
- DNS ASK si###loth.ru
- DNS ASK si###loth.net
- DNS ASK me###aid.net
- DNS ASK si###aid.net
- DNS ASK me###ugust.net
- DNS ASK si###ugust.net
- DNS ASK me##born.ru
- DNS ASK me###orn.net
- DNS ASK su###ypaid.net
- DNS ASK si###orn.net
- DNS ASK mo###loth.net
- DNS ASK th###orn.net
- DNS ASK he###aid.net
- DNS ASK ca###ugust.net
- DNS ASK he###ugust.ru
- DNS ASK he###ugust.net
- DNS ASK ca###orn.net
- DNS ASK he###orn.net
- DNS ASK qu###cloth.net
- DNS ASK th###loth.net
- DNS ASK qu###paid.ru
- DNS ASK qu###paid.net
- DNS ASK th###aid.net
- DNS ASK qu###august.net
- DNS ASK th###ugust.net
- DNS ASK qu###born.net
- DNS ASK th##born.ru
- DNS ASK su###ycloth.net
- DNS ASK cl###cloth.net
- DNS ASK da###loth.net
- DNS ASK cl###paid.net
- DNS ASK wi###aise.net
- DNS ASK du###aise.net
- DNS ASK wi###each.net
- DNS ASK du###each.ru
- DNS ASK du###each.net
- DNS ASK th###price.net
- DNS ASK ca###rice.net
- DNS ASK si###price.net
- DNS ASK si###croud.net
- DNS ASK th###raise.ru
- DNS ASK th###raise.net
- DNS ASK si###raise.net
- DNS ASK th###reach.net
- DNS ASK si###reach.net
- DNS ASK wi###roud.net
- DNS ASK du###roud.net
- DNS ASK wi###roud.ru
- DNS ASK du###rice.net
- DNS ASK wi###rice.net
- DNS ASK da###aid.net
- DNS ASK cl###august.net
- DNS ASK da###ugust.net
- DNS ASK cl###born.net
- DNS ASK da###orn.net
- DNS ASK mi###rice.ru
- DNS ASK he###rice.ru
- DNS ASK ca###eck.net
- DNS ASK mi###rice.net
- DNS ASK tr###croud.net
- DNS ASK mi###aise.net
- DNS ASK tr###raise.ru
- DNS ASK tr###raise.net
- DNS ASK mi###each.net
- DNS ASK tr###reach.net
- DNS ASK da##paid.ru
- DNS ASK mi###roud.net
- '23#.#55.255.250':1900
- '%TEMP%\hxmxqhgeoyr3fuqtuqsvz7shh.exe'
- '%WINDIR%\bnfslkjdd.exe'
- '%WINDIR%\lgepdlif.exe' "%WINDIR%\bnfslkjdd.exe"
- '%WINDIR%\temp\hxmxqhgfy8bohuqtuq.exe' -r 37447 tcp
- '%WINDIR%\syswow64\netsh.exe' firewall set opmode disable' (with hidden window)
- '%WINDIR%\temp\hxmxqhgfy8bohuqtuq.exe' -r 37447 tcp' (with hidden window)