Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Quality List Gateway Credential' = 'C:\tedfypf\jyboajaccw.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Helper Multimedia Mapper] 'ImagePath' = 'C:\tedfypf\jyboajaccw.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Helper Multimedia Mapper] 'Start' = '00000002'
- 'C:\tedfypf\hnfimrdt.exe' "c:\tedfypf\jyboajaccw.exe"
- 'C:\tedfypf\jyboajaccw.exe'
- 'C:\tedfypf\aw34xjbhfmruhybs2le.exe'
- C:\tedfypf\jyboajaccw.exe
- C:\tedfypf\hnfimrdt.exe
- C:\tedfypf\aw34xjbhfmruhybs2le.exe
- %WINDIR%\tedfypf\rdtmobfiqd
- C:\tedfypf\rdtmobfiqd
- C:\tedfypf\hnfimrdt.exe
- C:\tedfypf\jyboajaccw.exe
- C:\tedfypf\aw34xjbhfmruhybs2le.exe
- %WINDIR%\tedfypf\rdtmobfiqd
- %WINDIR%\tedfypf\rdtmobfiqd
- 'wi####straight.net':80
- 'pe####sguard.net':80
- 'pe####sstraight.net':80
- 'pe####sairplane.net':80
- 'wi####airplane.net':80
- 'wi###wguard.net':80
- 'su####tstraight.net':80
- 'wi###rguard.net':80
- 'su####tairplane.net':80
- 'pe####sfence.net':80
- 'wi###wfence.net':80
- 'mo#####nairplane.net':80
- 'po#####eairplane.net':80
- 'mo###rfence.net':80
- 'mo###rguard.net':80
- 'si###efence.net':80
- 'mo#####nstraight.net':80
- 'mo####infence.net':80
- 'po####lefence.net':80
- 'po####leguard.net':80
- 'po#####estraight.net':80
- 'mo####inguard.net':80
- 'pr#####ystraight.net':80
- 'sw###guard.net':80
- 'sw####traight.net':80
- 'sw####irplane.net':80
- 'pr#####yairplane.net':80
- 'pr####lyguard.net':80
- 'ma#####lairplane.net':80
- 'se####lstraight.net':80
- 'se####lairplane.net':80
- 'sw###fence.net':80
- 'pr####lyfence.net':80
- 'fi####airplane.net':80
- 'le####irplane.net':80
- 'su####tfence.net':80
- 'su####tguard.net':80
- 'wi###rfence.net':80
- 'fi####straight.net':80
- 'fi###hfence.net':80
- 'le###fence.net':80
- 'le###guard.net':80
- 'le####traight.net':80
- 'fi###hguard.net':80
- 'si###eguard.net':80
- 'fi####banker.net':80
- 'le###banker.net':80
- 'le####uccess.net':80
- 'le###spring.net':80
- 'fi####success.net':80
- 'sw###found.net':80
- 'sw####uccess.net':80
- 'pr####lysuccess.net':80
- 'pr####lyspring.net':80
- 'pr####lyfound.net':80
- 'sw###spring.net':80
- 'wi####spring.net':80
- 'su####tspring.net':80
- 'su####tfound.net':80
- 'wi####banker.net':80
- 'wi###rfound.net':80
- 'wi####success.net':80
- 'le###found.net':80
- 'fi####spring.net':80
- 'fi###hfound.net':80
- 'su####tsuccess.net':80
- 'su####tbanker.net':80
- 'se###aguard.net':80
- 'la###guard.net':80
- 'la####traight.net':80
- 'la####irplane.net':80
- 'se####straight.net':80
- 'se###afence.net':80
- 'si####straight.net':80
- 'mo####straight.net':80
- 'mo####airplane.net':80
- 'la###fence.net':80
- 'si####airplane.net':80
- 'ma####alfound.net':80
- 'se####lspring.net':80
- 'se####lfound.net':80
- 'sw###banker.net':80
- 'pr####lybanker.net':80
- 'ma####alspring.net':80
- 'ma####albanker.net':80
- 'se####airplane.net':80
- 'se####lbanker.net':80
- 'se####lsuccess.net':80
- 'ma####alsuccess.net':80
- http://wi####straight.net/index.php
- http://pe####sguard.net/index.php
- http://pe####sstraight.net/index.php
- http://pe####sairplane.net/index.php
- http://wi####airplane.net/index.php
- http://wi###wguard.net/index.php
- http://su####tstraight.net/index.php
- http://wi###rguard.net/index.php
- http://su####tairplane.net/index.php
- http://pe####sfence.net/index.php
- http://wi###wfence.net/index.php
- http://mo#####nairplane.net/index.php
- http://po#####eairplane.net/index.php
- http://mo###rfence.net/index.php
- http://mo###rguard.net/index.php
- http://si###efence.net/index.php
- http://mo#####nstraight.net/index.php
- http://mo####infence.net/index.php
- http://po####lefence.net/index.php
- http://po####leguard.net/index.php
- http://po#####estraight.net/index.php
- http://mo####inguard.net/index.php
- http://pr#####ystraight.net/index.php
- http://sw###guard.net/index.php
- http://sw####traight.net/index.php
- http://sw####irplane.net/index.php
- http://pr#####yairplane.net/index.php
- http://pr####lyguard.net/index.php
- http://ma#####lairplane.net/index.php
- http://se####lstraight.net/index.php
- http://se####lairplane.net/index.php
- http://sw###fence.net/index.php
- http://pr####lyfence.net/index.php
- http://fi####airplane.net/index.php
- http://le####irplane.net/index.php
- http://su####tfence.net/index.php
- http://su####tguard.net/index.php
- http://wi###rfence.net/index.php
- http://fi####straight.net/index.php
- http://fi###hfence.net/index.php
- http://le###fence.net/index.php
- http://le###guard.net/index.php
- http://le####traight.net/index.php
- http://fi###hguard.net/index.php
- http://si###eguard.net/index.php
- http://fi####banker.net/index.php
- http://le###banker.net/index.php
- http://le####uccess.net/index.php
- http://le###spring.net/index.php
- http://fi####success.net/index.php
- http://sw###found.net/index.php
- http://sw####uccess.net/index.php
- http://pr####lysuccess.net/index.php
- http://pr####lyspring.net/index.php
- http://pr####lyfound.net/index.php
- http://sw###spring.net/index.php
- http://wi####spring.net/index.php
- http://su####tspring.net/index.php
- http://su####tfound.net/index.php
- http://wi####banker.net/index.php
- http://wi###rfound.net/index.php
- http://wi####success.net/index.php
- http://le###found.net/index.php
- http://fi####spring.net/index.php
- http://fi###hfound.net/index.php
- http://su####tsuccess.net/index.php
- http://su####tbanker.net/index.php
- http://se###aguard.net/index.php
- http://la###guard.net/index.php
- http://la####traight.net/index.php
- http://la####irplane.net/index.php
- http://se####straight.net/index.php
- http://se###afence.net/index.php
- http://si####straight.net/index.php
- http://mo####straight.net/index.php
- http://mo####airplane.net/index.php
- http://la###fence.net/index.php
- http://si####airplane.net/index.php
- http://ma####alfound.net/index.php
- http://se####lspring.net/index.php
- http://se####lfound.net/index.php
- http://sw###banker.net/index.php
- http://pr####lybanker.net/index.php
- http://ma####alspring.net/index.php
- http://ma####albanker.net/index.php
- http://se####airplane.net/index.php
- http://se####lbanker.net/index.php
- http://se####lsuccess.net/index.php
- http://ma####alsuccess.net/index.php
- DNS ASK wi####straight.net
- DNS ASK pe####sguard.net
- DNS ASK pe####sstraight.net
- DNS ASK pe####sairplane.net
- DNS ASK wi####airplane.net
- DNS ASK wi###wguard.net
- DNS ASK su####tstraight.net
- DNS ASK wi###rguard.net
- DNS ASK su####tairplane.net
- DNS ASK pe####sfence.net
- DNS ASK wi###wfence.net
- DNS ASK mo#####nairplane.net
- DNS ASK po#####eairplane.net
- DNS ASK mo###rfence.net
- DNS ASK mo###rguard.net
- DNS ASK si###efence.net
- DNS ASK mo#####nstraight.net
- DNS ASK mo####infence.net
- DNS ASK po####lefence.net
- DNS ASK po####leguard.net
- DNS ASK po#####estraight.net
- DNS ASK mo####inguard.net
- DNS ASK su####tguard.net
- DNS ASK sw###guard.net
- DNS ASK pr####lyguard.net
- DNS ASK pr#####ystraight.net
- DNS ASK pr#####yairplane.net
- DNS ASK sw####traight.net
- DNS ASK sw###fence.net
- DNS ASK se####lstraight.net
- DNS ASK ma#####lstraight.net
- DNS ASK ma#####lairplane.net
- DNS ASK pr####lyfence.net
- DNS ASK se####lairplane.net
- DNS ASK le####irplane.net
- DNS ASK fi####straight.net
- DNS ASK fi####airplane.net
- DNS ASK wi###rfence.net
- DNS ASK su####tfence.net
- DNS ASK le####traight.net
- DNS ASK le###fence.net
- DNS ASK sw####irplane.net
- DNS ASK fi###hfence.net
- DNS ASK fi###hguard.net
- DNS ASK le###guard.net
- DNS ASK fi####banker.net
- DNS ASK le###banker.net
- DNS ASK le####uccess.net
- DNS ASK le###spring.net
- DNS ASK fi####success.net
- DNS ASK sw###found.net
- DNS ASK sw####uccess.net
- DNS ASK pr####lysuccess.net
- DNS ASK pr####lyspring.net
- DNS ASK pr####lyfound.net
- DNS ASK sw###spring.net
- DNS ASK wi####spring.net
- DNS ASK su####tspring.net
- DNS ASK su####tfound.net
- DNS ASK wi####banker.net
- DNS ASK wi###rfound.net
- DNS ASK wi####success.net
- DNS ASK le###found.net
- DNS ASK fi####spring.net
- DNS ASK fi###hfound.net
- DNS ASK su####tsuccess.net
- DNS ASK su####tbanker.net
- DNS ASK sw###banker.net
- DNS ASK la###guard.net
- DNS ASK se###afence.net
- DNS ASK se###aguard.net
- DNS ASK se####straight.net
- DNS ASK la####traight.net
- DNS ASK la###fence.net
- DNS ASK mo####straight.net
- DNS ASK si###eguard.net
- DNS ASK si####straight.net
- DNS ASK si####airplane.net
- DNS ASK mo####airplane.net
- DNS ASK se####lspring.net
- DNS ASK ma####alspring.net
- DNS ASK ma####alfound.net
- DNS ASK pr####lybanker.net
- DNS ASK se####lfound.net
- DNS ASK se####lsuccess.net
- DNS ASK se####airplane.net
- DNS ASK la####irplane.net
- DNS ASK ma####albanker.net
- DNS ASK ma####alsuccess.net
- DNS ASK se####lbanker.net
- ClassName: 'Shell_TrayWnd' WindowName: ''