Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'taskngr' = '%LOCALAPPDATA%\taskngr.exe'
- %LOCALAPPDATA%\taskngr.exe
- %LOCALAPPDATA%\taskngr.exe
- http://www.bi###alin.com/
- http://www.go###e.com.tr/
- DNS ASK bi###alin.com
- DNS ASK go###e.com.tr
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%LOCALAPPDATA%\taskngr.exe'
- '%LOCALAPPDATA%\taskngr.exe' ' (with hidden window)