Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Storage Browser Port CNG' = 'C:\z1blqpnmortum\dmeohcgurn.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Connect Smart Isolation] 'ImagePath' = 'C:\z1blqpnmortum\dmeohcgurn.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Connect Smart Isolation] 'Start' = '00000002'
- 'C:\z1blqpnmortum\qezgfeklp.exe' "c:\z1blqpnmortum\dmeohcgurn.exe"
- 'C:\z1blqpnmortum\dmeohcgurn.exe'
- 'C:\z1blqpnmortum\zphkuk2selbqdor7a2ljvs.exe'
- C:\z1blqpnmortum\dmeohcgurn.exe
- C:\z1blqpnmortum\qezgfeklp.exe
- C:\z1blqpnmortum\fnyhnnunrsz
- %WINDIR%\z1blqpnmortum\bsivtli3okd
- C:\z1blqpnmortum\bsivtli3okd
- C:\z1blqpnmortum\zphkuk2selbqdor7a2ljvs.exe
- C:\z1blqpnmortum\qezgfeklp.exe
- C:\z1blqpnmortum\dmeohcgurn.exe
- C:\z1blqpnmortum\zphkuk2selbqdor7a2ljvs.exe
- %WINDIR%\z1blqpnmortum\bsivtli3okd
- 'ga####liongrass.net':80
- 'pr####anabolikov.ru':80
- 'sy#####ergriselda.net':80
- 'wi#####edwhitaker.ru':80
- 'ga#####yundongyuan.cn':80
- 'do##bate.cn':80
- 'gu##155.cn':80
- 'cl#####ortswomen.com':80
- 'ch####isportsmen.ru':80
- 'wi#####edgriselda.net':80
- 'br#####nncatherin.net':80
- 'ka#####nacatherin.net':80
- 'br#####nnsunshine.net':80
- 'je#####tewhitaker.net':80
- 'br#####nncatherin.ru':80
- 'sy#####erwhitaker.net':80
- 'wi#####edwhitaker.net':80
- 'sy#####ersunshine.net':80
- 'wi#####edsunshine.net':80
- 'sc####ainbow.net':80
- 'na##top.ru':80
- 'ka#######ayajivayapriroda.ru':80
- 'ye####gdongwu.cn':80
- 'to###tosales.ru':80
- 'ca#####eeitinthecup.org':80
- 'bu####rmansion.com':80
- 'sc#####epuzzlechess.org':80
- 'sp##tnav.ru':80
- 'si###ypeas.net':80
- 'ta#####pielenreiten.org':80
- 'ha####nhalflion.net':80
- 'un###lgrain.org':80
- 'ag#####anabolics.com':80
- 'pi##asia.cn':80
- 'so####ryducks.com':80
- 'pr##card.ru':80
- 'gr###factory.cn':80
- 'cl####portsmen.com':80
- http://ga####liongrass.net/index.php
- http://pr####anabolikov.ru/index.php
- http://sy#####ergriselda.net/index.php
- http://wi#####edwhitaker.ru/index.php
- http://ga#####yundongyuan.cn/index.php
- http://do##bate.cn/index.php
- http://gu##155.cn/index.php
- http://cl#####ortswomen.com/index.php
- http://ch####isportsmen.ru/index.php
- http://wi#####edgriselda.net/index.php
- http://br#####nncatherin.net/index.php
- http://ka#####nacatherin.net/index.php
- http://br#####nnsunshine.net/index.php
- http://je#####tewhitaker.net/index.php
- http://br#####nncatherin.ru/index.php
- http://sy#####erwhitaker.net/index.php
- http://wi#####edwhitaker.net/index.php
- http://sy#####ersunshine.net/index.php
- http://wi#####edsunshine.net/index.php
- http://sc####ainbow.net/index.php
- http://na##top.ru/index.php
- http://ka#######ayajivayapriroda.ru/index.php
- http://ye####gdongwu.cn/index.php
- http://to###tosales.ru/index.php
- http://ca#####eeitinthecup.org/index.php
- http://bu####rmansion.com/index.php
- http://sc#####epuzzlechess.org/index.php
- http://sp##tnav.ru/index.php
- http://si###ypeas.net/index.php
- http://ta#####pielenreiten.org/index.php
- http://ha####nhalflion.net/index.php
- http://un###lgrain.org/index.php
- http://ag#####anabolics.com/index.php
- http://pi##asia.cn/index.php
- http://so####ryducks.com/index.php
- http://pr##card.ru/index.php
- http://gr###factory.cn/index.php
- http://cl####portsmen.com/index.php
- DNS ASK ki#####eypickering.net
- DNS ASK ki#####eypickering.ru
- DNS ASK je#####tepickering.net
- DNS ASK je#####tegeorgeson.net
- DNS ASK ki#####eyeccleston.net
- DNS ASK je#####teeccleston.net
- DNS ASK ha#####tegeorgeson.net
- DNS ASK ha#####tegeorgeson.ru
- DNS ASK gw#####yneccleston.net
- DNS ASK gw#####yngrenville.net
- DNS ASK ha#####tegrenville.net
- DNS ASK gw#####yngeorgeson.net
- DNS ASK gr#####leeccleston.net
- DNS ASK gr#####leeccleston.ru
- DNS ASK ma#####neeccleston.net
- DNS ASK ma#####negrenville.net
- DNS ASK gr#####legeorgeson.net
- DNS ASK ma#####negeorgeson.net
- DNS ASK je#####tegrenville.net
- DNS ASK je#####tegrenville.ru
- DNS ASK ki#####eygeorgeson.net
- DNS ASK gr#####lepickering.net
- DNS ASK ma#####nepickering.net
- DNS ASK ki#####eygrenville.net
- DNS ASK ha#####teeccleston.net
- DNS ASK sy#####ergeorgeson.ru
- DNS ASK wi#####edgeorgeson.net
- DNS ASK sy#####ereccleston.net
- DNS ASK sy#####ergrenville.net
- DNS ASK wi#####edgrenville.net
- DNS ASK sy#####ergeorgeson.net
- DNS ASK wi#####edpickering.ru
- DNS ASK jo#####negrenville.net
- DNS ASK ma#####inegrenville.net
- DNS ASK wi#####edeccleston.net
- DNS ASK sy#####erpickering.net
- DNS ASK wi#####edpickering.net
- DNS ASK br#####nngrenville.ru
- DNS ASK ka#####nagrenville.net
- DNS ASK br#####nngeorgeson.net
- DNS ASK gw#####ynpickering.net
- DNS ASK ha#####tepickering.net
- DNS ASK br#####nngrenville.net
- DNS ASK ka#####naeccleston.ru
- DNS ASK br#####nnpickering.net
- DNS ASK ka#####napickering.net
- DNS ASK ka#####nageorgeson.net
- DNS ASK br#####nneccleston.net
- DNS ASK ka#####naeccleston.net
- DNS ASK wi#####edsamuelson.net
- DNS ASK sy#####erstevenson.net
- DNS ASK sy#####erstevenson.ru
- DNS ASK sy#####erthompsett.net
- DNS ASK wi#####edthompsett.net
- DNS ASK sy#####ersamuelson.net
- DNS ASK jo#####nethompsett.net
- DNS ASK ma#####inethompsett.net
- DNS ASK ma#####inethompsett.ru
- DNS ASK wi#####edstevenson.net
- DNS ASK jo#####necristians.net
- DNS ASK ma#####inecristians.net
- DNS ASK ka#####nathompsett.net
- DNS ASK br#####nnsamuelson.net
- DNS ASK br#####nnsamuelson.ru
- DNS ASK br#####nncristians.net
- DNS ASK ka#####nacristians.net
- DNS ASK br#####nnthompsett.net
- DNS ASK sy#####ercristians.net
- DNS ASK wi#####edcristians.net
- DNS ASK wi#####edcristians.ru
- DNS ASK ka#####nasamuelson.net
- DNS ASK br#####nnstevenson.net
- DNS ASK ka#####nastevenson.net
- DNS ASK jo#####nesamuelson.net
- DNS ASK st#####iageorgeson.net
- DNS ASK st#####iageorgeson.ru
- DNS ASK si#####tegeorgeson.net
- DNS ASK me#####herstevenson.net
- DNS ASK st#####iagrenville.net
- DNS ASK si#####tegrenville.net
- DNS ASK si#####tepickering.net
- DNS ASK si#####tepickering.ru
- DNS ASK gr#####legrenville.net
- DNS ASK st#####iaeccleston.net
- DNS ASK si#####teeccleston.net
- DNS ASK st#####iapickering.net
- DNS ASK ca#####necristians.net
- DNS ASK ca#####necristians.ru
- DNS ASK me#####hercristians.net
- DNS ASK ma#####inesamuelson.net
- DNS ASK jo#####nestevenson.net
- DNS ASK ma#####inestevenson.net
- DNS ASK me#####hersamuelson.net
- DNS ASK me#####hersamuelson.ru
- DNS ASK ca#####nestevenson.net
- DNS ASK ca#####nethompsett.net
- DNS ASK me#####herthompsett.net
- DNS ASK ca#####nesamuelson.net
- DNS ASK br#####nncatherin.ru
- DNS ASK sy#####ersunshine.net
- DNS ASK wi#####edsunshine.net
- DNS ASK je#####tewhitaker.net
- DNS ASK br#####nncatherin.net
- DNS ASK ka#####nacatherin.net
- DNS ASK sy#####ergriselda.net
- DNS ASK wi#####edwhitaker.ru
- DNS ASK ga####liongrass.net
- DNS ASK sy#####erwhitaker.net
- DNS ASK wi#####edwhitaker.net
- DNS ASK wi#####edgriselda.net
- DNS ASK ma#####negriselda.net
- DNS ASK ki#####eywhitaker.ru
- DNS ASK je#####tecatherin.net
- DNS ASK ha#####tewhitaker.net
- DNS ASK ha#####tesunshine.net
- DNS ASK gw#####ynwhitaker.net
- DNS ASK ma#####necatherin.net
- DNS ASK br#####nnwhitaker.net
- DNS ASK br#####nnsunshine.net
- DNS ASK ka#####nagriselda.net
- DNS ASK ha#####tegriselda.net
- DNS ASK ki#####eygriselda.net
- DNS ASK pr####anabolikov.ru
- DNS ASK ka#######ayajivayapriroda.ru
- DNS ASK ye####gdongwu.cn
- DNS ASK sc####ainbow.net
- DNS ASK so####ryducks.com
- DNS ASK pr##card.ru
- DNS ASK si###ypeas.net
- DNS ASK sp##tnav.ru
- DNS ASK ca#####eeitinthecup.org
- DNS ASK bu####rmansion.com
- DNS ASK na##top.ru
- DNS ASK to###tosales.ru
- DNS ASK sc#####epuzzlechess.org
- DNS ASK do##bate.cn
- DNS ASK gu##155.cn
- DNS ASK un###lgrain.org
- DNS ASK ga#####yundongyuan.cn
- DNS ASK cl#####ortswomen.com
- DNS ASK ch####isportsmen.ru
- DNS ASK pi##asia.cn
- DNS ASK gr###factory.cn
- DNS ASK cl####portsmen.com
- DNS ASK ag#####anabolics.com
- DNS ASK ta#####pielenreiten.org
- DNS ASK ha####nhalflion.net
- DNS ASK ca#####nepickering.ru
- DNS ASK me#####herpickering.net
- DNS ASK st#####iasunshine.net
- DNS ASK ca#####neeccleston.net
- DNS ASK me#####hereccleston.net
- DNS ASK ca#####nepickering.net
- DNS ASK si#####tewhitaker.ru
- DNS ASK st#####iagriselda.net
- DNS ASK si#####tegriselda.net
- DNS ASK si#####tesunshine.net
- DNS ASK st#####iawhitaker.net
- DNS ASK si#####tewhitaker.net
- DNS ASK jo#####neeccleston.ru
- DNS ASK ma#####ineeccleston.net
- DNS ASK jo#####nepickering.net
- DNS ASK jo#####negeorgeson.net
- DNS ASK ma#####inegeorgeson.net
- DNS ASK jo#####neeccleston.net
- DNS ASK me#####hergrenville.ru
- DNS ASK ca#####negeorgeson.net
- DNS ASK me#####hergeorgeson.net
- DNS ASK ma#####inepickering.net
- DNS ASK ca#####negrenville.net
- DNS ASK me#####hergrenville.net
- DNS ASK st#####iacatherin.net
- DNS ASK ki#####eysunshine.net
- DNS ASK ma#####negriselda.ru
- DNS ASK br#####nngriselda.net
- DNS ASK gr#####lecatherin.net
- DNS ASK gr#####legriselda.net
- DNS ASK ka#####nasunshine.ru
- DNS ASK gw#####yngriselda.net
- DNS ASK ki#####eycatherin.net
- DNS ASK gw#####ynsunshine.net
- DNS ASK gw#####yncatherin.net
- DNS ASK gw#####yngriselda.ru
- DNS ASK je#####tecatherin.ru
- DNS ASK ma#####nesunshine.net
- DNS ASK gr#####lewhitaker.net
- DNS ASK ma#####newhitaker.net
- DNS ASK si#####tecatherin.net
- DNS ASK gr#####lesunshine.net
- DNS ASK gr#####lesunshine.ru
- DNS ASK ka#####nawhitaker.net
- DNS ASK ka#####nasunshine.net
- DNS ASK je#####tegriselda.net
- DNS ASK je#####tesunshine.net
- DNS ASK ki#####eywhitaker.net
- DNS ASK ha#####tecatherin.net