Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Cyqeqa' = '%TEMP%\Riidp\cyqeqa.exe'
- [<HKLM>\SYSTEM\ControlSet001\services\7124283ecb84a397] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\services\7124283ecb84a397] 'ImagePath' = '<DRIVERS>\7124283ecb84a397.sys'
- [<HKLM>\SYSTEM\ControlSet001\services\67177] 'Start' = '00000001'
- '%TEMP%\Riidp\cyqeqa.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\explorer.exe"
- <SYSTEM32>\cmd.exe
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\dgelvbmkjfainkvingycipjfx_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\dxjvcqlpxivgaxceixrug_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\wytwjrpjamtijrxhihaguwin_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\autfmauhtkqcttjzoruwrshekv_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\rwpvzxrgcqxqofqqgwwylxo_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\kdaaediugylhxsremrqwhi_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\auyhtkozcazpjdutcjzdaus_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xqodtnvrpxlzgydxgfugm_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\filjlvibtxsxfezskyxtwr_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\lfxgqzlhdjbheulyhzlvsam_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\tttcxheypxkffzptoxciofg_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ytwgwmngqrzptcxcrdmbuseivgp_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\luuonmfdorzplhfakffeojae_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\pfqtlfxkjroxkdgerivxg_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\amxfmgavclttkbqpvibdaaexkbuo_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\uktpvnzdadztobmnylrghyvgjzpz_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hspjbmtstklzlndarwvkwsuo_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ayhhkbdyhrkuxgbujbuk_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\mvrcsugrcwezxmfwsiojyljv_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hljgepfrkrknfvgbqnvyjzrodm_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\tclzacizyptoobucyobpp_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ijbqoncyxdmfpzxohaxircueq_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\vhufyxjbtcifpjonhqozdqkuswg_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\zhtamdasotvkvkkjzhbeyhmzgugioj_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\vsztivswsomzcqpnbxeeyozpnoznv_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\reageaemrgprfuxaukjtkcvrw_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\eynfqpsibxsenbkfbmrglgix_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hexpvqwsklypgqlvstxinzpgyt_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\twlxolpjvsdqonuchmzgqpvuo_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\rsxpjsuspcbqvgamlzljfukn_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\bajzdukhhaymvxopbswvkobrrfe_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hiaugqypnbbiyhyhirgnzhemvkvk_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xspfiivobfjirnzbmfalzljbfu_net[1]
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Outbox\winmail.fol
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Sent Items\winmail.fol
- <LS_APPDATA>\Microsoft\Windows Mail\edb.log
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Inbox\winmail.fol
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Junk E-mail\winmail.fol
- %TEMP%\TSO466A.bat
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Deleted Items\winmail.fol
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Drafts\winmail.fol
- <DRIVERS>\7124283ecb84a397.sys
- <LS_APPDATA>\Microsoft\Windows Mail\tmp.edb
- %TEMP%\Riidp\cyqeqa.exe
- <DRIVERS>\67177.sys
- <LS_APPDATA>\Microsoft\Windows Mail\Backup\temp\edb00002.log
- <LS_APPDATA>\Microsoft\Windows Mail\Backup\temp\WindowsMail.pat
- <LS_APPDATA>\Microsoft\Windows Mail\Backup\temp\WindowsMail.MSMessageStore
- <LS_APPDATA>\Microsoft\Windows Mail\edbtmp.log
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Inbox\616404C9-00000001.eml
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\bunjijauxgpxobusosgbubylx_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\amdumvlnwlhdeaukfxrswbyc_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\lzfeofnbgairtkztrwcabadqtoosk_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\pfqroikztgnzcqaitclaikraygm_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\eugqkvswmvcmjckrnfjrhtnjpf_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\zlapjdscfieupninfgugmozzxp_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\kzeutfucugujflrnvwoytlthyyx_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xcduguogydstlvorxottug_com[1]
- %TEMP%\Tar4309.tmp
- %TEMP%\ppcrlui_4028_2
- <LS_APPDATA>\Microsoft\Windows Mail\Local Folders\Inbox\616404C9-00000001.eml:OECustomProperty
- %TEMP%\Cab42E9.tmp
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ylvceijbdvtswxsvsgixpvm_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\yluwzlvgmbemzxkfmnkzzpzhwoin_com[1]
- <LS_APPDATA>Low\Microsoft\CryptnetUrlCache\MetaData\E6024EAC88E6B6165D49FE3C95ADD735
- <LS_APPDATA>Low\Microsoft\CryptnetUrlCache\Content\E6024EAC88E6B6165D49FE3C95ADD735
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hexpvqwsklypgqlvstxinzpgyt_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hspjbmtstklzlndarwvkwsuo_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\twlxolpjvsdqonuchmzgqpvuo_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\eynfqpsibxsenbkfbmrglgix_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\reageaemrgprfuxaukjtkcvrw_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\kdaaediugylhxsremrqwhi_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\dxjvcqlpxivgaxceixrug_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\dgelvbmkjfainkvingycipjfx_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\auyhtkozcazpjdutcjzdaus_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\rwpvzxrgcqxqofqqgwwylxo_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xqodtnvrpxlzgydxgfugm_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hiaugqypnbbiyhyhirgnzhemvkvk_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\zhtamdasotvkvkkjzhbeyhmzgugioj_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\mvrcsugrcwezxmfwsiojyljv_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\vsztivswsomzcqpnbxeeyozpnoznv_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\vhufyxjbtcifpjonhqozdqkuswg_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ijbqoncyxdmfpzxohaxircueq_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ayhhkbdyhrkuxgbujbuk_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\rsxpjsuspcbqvgamlzljfukn_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xspfiivobfjirnzbmfalzljbfu_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\bajzdukhhaymvxopbswvkobrrfe_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\tclzacizyptoobucyobpp_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\hljgepfrkrknfvgbqnvyjzrodm_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\bunjijauxgpxobusosgbubylx_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\pfqroikztgnzcqaitclaikraygm_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\amdumvlnwlhdeaukfxrswbyc_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\xcduguogydstlvorxottug_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\kzeutfucugujflrnvwoytlthyyx_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\lzfeofnbgairtkztrwcabadqtoosk_info[1]
- %TEMP%\Cab42E9.tmp
- <DRIVERS>\67177.sys
- %TEMP%\Tar4309.tmp
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\yluwzlvgmbemzxkfmnkzzpzhwoin_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ylvceijbdvtswxsvsgixpvm_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\eugqkvswmvcmjckrnfjrhtnjpf_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\luuonmfdorzplhfakffeojae_net[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\uktpvnzdadztobmnylrghyvgjzpz_org[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\pfqtlfxkjroxkdgerivxg_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\autfmauhtkqcttjzoruwrshekv_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\wytwjrpjamtijrxhihaguwin_ru[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\amxfmgavclttkbqpvibdaaexkbuo_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\tttcxheypxkffzptoxciofg_info[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\zlapjdscfieupninfgugmozzxp_biz[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\ytwgwmngqrzptcxcrdmbuseivgp_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\lfxgqzlhdjbheulyhzlvsam_com[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\filjlvibtxsxfezskyxtwr_ru[1]
- <LS_APPDATA>\Microsoft\Windows Mail\edbtmp.log в <LS_APPDATA>\Microsoft\Windows Mail\edb.log
- 'he#######lypgqlvstxinzpgyt.org':80
- 'hs#######klzlndarwvkwsuo.info':80
- 'tw#######sdqonuchmzgqpvuo.net':80
- 'ey######bxsenbkfbmrglgix.ru':80
- 're#######gprfuxaukjtkcvrw.biz':80
- 'kd######gylhxsremrqwhi.com':80
- 'dx######xivgaxceixrug.org':80
- 'dg#######fainkvingycipjfx.net':80
- 'au#######azpjdutcjzdaus.info':80
- 'rw######cqxqofqqgwwylxo.ru':80
- 'xq######pxlzgydxgfugm.com':80
- 'hi########biyhyhirgnzhemvkvk.com':80
- 'zh########vkvkkjzhbeyhmzgugioj.biz':80
- 'mv#######wezxmfwsiojyljv.info':80
- 'vs########mzcqpnbxeeyozpnoznv.net':80
- 'vh#######cifpjonhqozdqkuswg.ru':80
- 'ij#######dmfpzxohaxircueq.com':80
- 'ay######hrkuxgbujbuk.com':80
- 'rs#######cbqvgamlzljfukn.org':80
- 'xs#######fjirnzbmfalzljbfu.net':80
- 'ba#######aymvxopbswvkobrrfe.biz':80
- 'tc######yptoobucyobpp.ru':80
- 'hl#######rknfvgbqnvyjzrodm.com':80
- 'bu#######gpxobusosgbubylx.biz':80
- 'pf#######gnzcqaitclaikraygm.org':80
- 'am#######lhdeaukfxrswbyc.com':80
- 'xc######ydstlvorxottug.com':80
- 'kz#######gujflrnvwoytlthyyx.ru':80
- 'lz########irtkztrwcabadqtoosk.info':80
- '74.##5.232.51':80
- '20#.#6.232.182':80
- 'www.bing.com':80
- 'yl########emzxkfmnkzzpzhwoin.com':80
- 'yl######dvtswxsvsgixpvm.ru':80
- 'eu#######vcmjckrnfjrhtnjpf.net':80
- 'lu#######rzplhfakffeojae.net':80
- 'uk########ztobmnylrghyvgjzpz.org':80
- 'pf######jroxkdgerivxg.com':80
- 'au#######kqcttjzoruwrshekv.biz':80
- 'wy######amtijrxhihaguwin.ru':80
- 'am########ttkbqpvibdaaexkbuo.biz':80
- 'tt#######xkffzptoxciofg.info':80
- 'zl#######ieupninfgugmozzxp.biz':80
- 'yt#######rzptcxcrdmbuseivgp.com':80
- 'lf######djbheulyhzlvsam.com':80
- 'fi######txsxfezskyxtwr.ru':80
- he#######lypgqlvstxinzpgyt.org/
- hs#######klzlndarwvkwsuo.info/
- tw#######sdqonuchmzgqpvuo.net/
- ey######bxsenbkfbmrglgix.ru/
- re#######gprfuxaukjtkcvrw.biz/
- kd######gylhxsremrqwhi.com/
- dx######xivgaxceixrug.org/
- dg#######fainkvingycipjfx.net/
- au#######azpjdutcjzdaus.info/
- rw######cqxqofqqgwwylxo.ru/
- xq######pxlzgydxgfugm.com/
- hi########biyhyhirgnzhemvkvk.com/
- zh########vkvkkjzhbeyhmzgugioj.biz/
- mv#######wezxmfwsiojyljv.info/
- vs########mzcqpnbxeeyozpnoznv.net/
- vh#######cifpjonhqozdqkuswg.ru/
- ij#######dmfpzxohaxircueq.com/
- ay######hrkuxgbujbuk.com/
- rs#######cbqvgamlzljfukn.org/
- xs#######fjirnzbmfalzljbfu.net/
- ba#######aymvxopbswvkobrrfe.biz/
- tc######yptoobucyobpp.ru/
- hl#######rknfvgbqnvyjzrodm.com/
- bu#######gpxobusosgbubylx.biz/
- pf#######gnzcqaitclaikraygm.org/
- am#######lhdeaukfxrswbyc.com/
- xc######ydstlvorxottug.com/
- kz#######gujflrnvwoytlthyyx.ru/
- lz########irtkztrwcabadqtoosk.info/
- 74.##5.232.51/
- 20#.#6.232.182/pki/crl/products/CodeSignPCA.crl
- www.bing.com/
- yl########emzxkfmnkzzpzhwoin.com/
- yl######dvtswxsvsgixpvm.ru/
- eu#######vcmjckrnfjrhtnjpf.net/
- lu#######rzplhfakffeojae.net/
- uk########ztobmnylrghyvgjzpz.org/
- pf######jroxkdgerivxg.com/
- au#######kqcttjzoruwrshekv.biz/
- wy######amtijrxhihaguwin.ru/
- am########ttkbqpvibdaaexkbuo.biz/
- tt#######xkffzptoxciofg.info/
- zl#######ieupninfgugmozzxp.biz/
- yt#######rzptcxcrdmbuseivgp.com/
- lf######djbheulyhzlvsam.com/
- fi######txsxfezskyxtwr.ru/
- DNS ASK dg#######fainkvingycipjfx.net
- DNS ASK dx######xivgaxceixrug.org
- DNS ASK wy######amtijrxhihaguwin.ru
- DNS ASK au#######kqcttjzoruwrshekv.biz
- DNS ASK rw######cqxqofqqgwwylxo.ru
- DNS ASK kd######gylhxsremrqwhi.com
- DNS ASK au#######azpjdutcjzdaus.info
- DNS ASK xq######pxlzgydxgfugm.com
- DNS ASK fi######txsxfezskyxtwr.ru
- DNS ASK lf######djbheulyhzlvsam.com
- DNS ASK tt#######xkffzptoxciofg.info
- DNS ASK yt#######rzptcxcrdmbuseivgp.com
- DNS ASK lu#######rzplhfakffeojae.net
- DNS ASK pf######jroxkdgerivxg.com
- DNS ASK am########ttkbqpvibdaaexkbuo.biz
- DNS ASK uk########ztobmnylrghyvgjzpz.org
- DNS ASK tc######yptoobucyobpp.ru
- DNS ASK ay######hrkuxgbujbuk.com
- DNS ASK ba#######aymvxopbswvkobrrfe.biz
- DNS ASK hl#######rknfvgbqnvyjzrodm.com
- DNS ASK vs########mzcqpnbxeeyozpnoznv.net
- DNS ASK ij#######dmfpzxohaxircueq.com
- DNS ASK mv#######wezxmfwsiojyljv.info
- DNS ASK zh########vkvkkjzhbeyhmzgugioj.biz
- DNS ASK tw#######sdqonuchmzgqpvuo.net
- DNS ASK re#######gprfuxaukjtkcvrw.biz
- DNS ASK hs#######klzlndarwvkwsuo.info
- DNS ASK he#######lypgqlvstxinzpgyt.org
- DNS ASK xs#######fjirnzbmfalzljbfu.net
- DNS ASK rs#######cbqvgamlzljfukn.org
- DNS ASK ey######bxsenbkfbmrglgix.ru
- DNS ASK hi########biyhyhirgnzhemvkvk.com
- DNS ASK vh#######cifpjonhqozdqkuswg.ru
- DNS ASK www.bing.com
- DNS ASK yl######dvtswxsvsgixpvm.ru
- DNS ASK yl########emzxkfmnkzzpzhwoin.com
- DNS ASK crl.microsoft.com
- DNS ASK zl#######ieupninfgugmozzxp.biz
- DNS ASK www.google.com
- DNS ASK lz########irtkztrwcabadqtoosk.info
- DNS ASK kz#######gujflrnvwoytlthyyx.ru
- DNS ASK eu#######vcmjckrnfjrhtnjpf.net
- DNS ASK xc######ydstlvorxottug.com
- DNS ASK pf#######gnzcqaitclaikraygm.org
- DNS ASK bu#######gpxobusosgbubylx.biz
- DNS ASK am#######lhdeaukfxrswbyc.com
- '75.#.220.146':2763
- '19#.#7.198.162':2096
- '13#.#17.72.241':5582
- '75.##.113.250':5436
- '76.##.212.115':3232
- '24.##4.212.47':8363
- '17#.#9.110.91':1442
- '21#.#20.146.245':6585
- '70.#0.73.3':5469
- '13#.#1.187.61':9503
- '77.##9.59.243':4106
- '13#.#35.218.230':7240
- '17#.#45.217.122':2943
- '13#.#17.197.214':6740
- '19#.#14.152.188':9367
- '85.##.106.65':1973
- '98.##2.88.224':2250
- '19#.#36.85.223':9504
- '10#.#07.83.8':2701
- '19#.#34.52.206':9329
- ClassName: 'OutlookExpressHiddenWindow' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'