Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Desktop Function Program AuthIP' = 'C:\pfwfmkjmaz\atmdktpmhd.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Acquisition Secondary Collector Isolation] 'Start' = '00000002'
- 'C:\pfwfmkjmaz\aoxvlvjm.exe' "c:\pfwfmkjmaz\atmdktpmhd.exe"
- 'C:\pfwfmkjmaz\atmdktpmhd.exe'
- 'C:\pfwfmkjmaz\z9l2ucgzvggqwescrsj.exe'
- C:\pfwfmkjmaz\atmdktpmhd.exe
- C:\pfwfmkjmaz\aoxvlvjm.exe
- C:\pfwfmkjmaz\overwpb8
- %WINDIR%\pfwfmkjmaz\hylgkgngiuib
- C:\pfwfmkjmaz\hylgkgngiuib
- C:\pfwfmkjmaz\z9l2ucgzvggqwescrsj.exe
- C:\pfwfmkjmaz\aoxvlvjm.exe
- C:\pfwfmkjmaz\atmdktpmhd.exe
- C:\pfwfmkjmaz\z9l2ucgzvggqwescrsj.exe
- %WINDIR%\pfwfmkjmaz\hylgkgngiuib
- 'am####stream.net':80
- 'we####rstream.net':80
- 'st####edivide.net':80
- 'hi####ydivide.net':80
- 'am####nothing.net':80
- 'we####rbottle.net':80
- 'am####divide.net':80
- 'we####rnothing.net':80
- 'am####bottle.net':80
- 'mo####gdivide.net':80
- 'st####estream.net':80
- 'mo####gbottle.net':80
- 'ra####divide.net':80
- 'hi####ystream.net':80
- 'st####ebottle.net':80
- 'hi####ybottle.net':80
- 'st####enothing.net':80
- 'hi####ynothing.net':80
- 'we####rdivide.net':80
- 'pr####tappear.net':80
- 'ch###manner.net':80
- 'pr####tbusiness.net':80
- 'th###appear.net':80
- 'co####emanner.net':80
- 'ch####usiness.net':80
- 'co####ebusiness.net':80
- 'ch####nother.net':80
- 'co####eanother.net':80
- 'cl###bottle.net':80
- 'cl###divide.net':80
- 'cl###stream.net':80
- 'cl####othing.net':80
- 'th###manner.net':80
- 'pr####tanother.net':80
- 'th####usiness.net':80
- 'pr####tmanner.net':80
- 'th####nother.net':80
- 'co####enothing.net':80
- 'ch###bottle.net':80
- 'co####estream.net':80
- 'ch####othing.net':80
- 'co####ebottle.net':80
- 'of###stream.net':80
- 'al###stream.net':80
- 'ch###divide.net':80
- 'co####edivide.net':80
- 'th####othing.net':80
- 'pr####tnothing.net':80
- 'th###stream.net':80
- 'pr####tstream.net':80
- 'th###bottle.net':80
- 'pr####tdivide.net':80
- 'ch###stream.net':80
- 'pr####tbottle.net':80
- 'th###divide.net':80
- 'of####othing.net':80
- 'mi####divide.net':80
- 'tw####divide.net':80
- 'mi####bottle.net':80
- 'tw####bottle.net':80
- 'ra####stream.net':80
- 'mo####gnothing.net':80
- 'ra####bottle.net':80
- 'mo####gstream.net':80
- 'ra####nothing.net':80
- 'al###bottle.net':80
- 'of###divide.net':80
- 'al####othing.net':80
- 'of###bottle.net':80
- 'al###divide.net':80
- 'mi####nothing.net':80
- 'tw####nothing.net':80
- 'mi####stream.net':80
- 'tw####stream.net':80
- http://am####stream.net/index.php?me########
- http://we####rstream.net/index.php?me########
- http://st####edivide.net/index.php?me########
- http://hi####ydivide.net/index.php?me########
- http://am####nothing.net/index.php?me########
- http://we####rbottle.net/index.php?me########
- http://am####divide.net/index.php?me########
- http://we####rnothing.net/index.php?me########
- http://am####bottle.net/index.php?me########
- http://mo####gdivide.net/index.php?me########
- http://st####estream.net/index.php?me########
- http://mo####gbottle.net/index.php?me########
- http://ra####divide.net/index.php?me########
- http://hi####ystream.net/index.php?me########
- http://st####ebottle.net/index.php?me########
- http://hi####ybottle.net/index.php?me########
- http://st####enothing.net/index.php?me########
- http://hi####ynothing.net/index.php?me########
- http://we####rdivide.net/index.php?me########
- http://pr####tappear.net/index.php?me########
- http://ch###manner.net/index.php?me########
- http://pr####tbusiness.net/index.php?me########
- http://th###appear.net/index.php?me########
- http://co####emanner.net/index.php?me########
- http://ch####usiness.net/index.php?me########
- http://co####ebusiness.net/index.php?me########
- http://ch####nother.net/index.php?me########
- http://co####eanother.net/index.php?me########
- http://cl###bottle.net/index.php?me########
- http://cl###divide.net/index.php?me########
- http://cl###stream.net/index.php?me########
- http://cl####othing.net/index.php?me########
- http://th###manner.net/index.php?me########
- http://pr####tanother.net/index.php?me########
- http://th####usiness.net/index.php?me########
- http://pr####tmanner.net/index.php?me########
- http://th####nother.net/index.php?me########
- http://co####enothing.net/index.php?me########
- http://ch###bottle.net/index.php?me########
- http://co####estream.net/index.php?me########
- http://ch####othing.net/index.php?me########
- http://co####ebottle.net/index.php?me########
- http://of###stream.net/index.php?me########
- http://al###stream.net/index.php?me########
- http://ch###divide.net/index.php?me########
- http://co####edivide.net/index.php?me########
- http://th####othing.net/index.php?me########
- http://pr####tnothing.net/index.php?me########
- http://th###stream.net/index.php?me########
- http://pr####tstream.net/index.php?me########
- http://th###bottle.net/index.php?me########
- http://pr####tdivide.net/index.php?me########
- http://ch###stream.net/index.php?me########
- http://pr####tbottle.net/index.php?me########
- http://th###divide.net/index.php?me########
- http://of####othing.net/index.php?me########
- http://mi####divide.net/index.php?me########
- http://tw####divide.net/index.php?me########
- http://mi####bottle.net/index.php?me########
- http://tw####bottle.net/index.php?me########
- http://ra####stream.net/index.php?me########
- http://mo####gnothing.net/index.php?me########
- http://ra####bottle.net/index.php?me########
- http://mo####gstream.net/index.php?me########
- http://ra####nothing.net/index.php?me########
- http://al###bottle.net/index.php?me########
- http://of###divide.net/index.php?me########
- http://al####othing.net/index.php?me########
- http://of###bottle.net/index.php?me########
- http://al###divide.net/index.php?me########
- http://mi####nothing.net/index.php?me########
- http://tw####nothing.net/index.php?me########
- http://mi####stream.net/index.php?me########
- http://tw####stream.net/index.php?me########
- DNS ASK am####stream.net
- DNS ASK we####rstream.net
- DNS ASK st####edivide.net
- DNS ASK hi####ydivide.net
- DNS ASK am####nothing.net
- DNS ASK we####rbottle.net
- DNS ASK am####divide.net
- DNS ASK we####rnothing.net
- DNS ASK am####bottle.net
- DNS ASK mo####gdivide.net
- DNS ASK st####estream.net
- DNS ASK mo####gbottle.net
- DNS ASK ra####divide.net
- DNS ASK hi####ystream.net
- DNS ASK st####ebottle.net
- DNS ASK hi####ybottle.net
- DNS ASK st####enothing.net
- DNS ASK hi####ynothing.net
- DNS ASK we####rdivide.net
- DNS ASK pr####tappear.net
- DNS ASK ch###manner.net
- DNS ASK pr####tbusiness.net
- DNS ASK th###appear.net
- DNS ASK co####emanner.net
- DNS ASK ch####usiness.net
- DNS ASK co####ebusiness.net
- DNS ASK ch####nother.net
- DNS ASK co####eanother.net
- DNS ASK cl###bottle.net
- DNS ASK cl###divide.net
- DNS ASK cl###stream.net
- DNS ASK cl####othing.net
- DNS ASK th###manner.net
- DNS ASK pr####tanother.net
- DNS ASK th####usiness.net
- DNS ASK pr####tmanner.net
- DNS ASK th####nother.net
- DNS ASK co####enothing.net
- DNS ASK ch###bottle.net
- DNS ASK co####estream.net
- DNS ASK ch####othing.net
- DNS ASK co####ebottle.net
- DNS ASK of###stream.net
- DNS ASK al###stream.net
- DNS ASK ch###divide.net
- DNS ASK co####edivide.net
- DNS ASK th####othing.net
- DNS ASK pr####tnothing.net
- DNS ASK th###stream.net
- DNS ASK pr####tstream.net
- DNS ASK th###bottle.net
- DNS ASK pr####tdivide.net
- DNS ASK ch###stream.net
- DNS ASK pr####tbottle.net
- DNS ASK th###divide.net
- DNS ASK of####othing.net
- DNS ASK mi####divide.net
- DNS ASK tw####divide.net
- DNS ASK mi####bottle.net
- DNS ASK tw####bottle.net
- DNS ASK ra####stream.net
- DNS ASK mo####gnothing.net
- DNS ASK ra####bottle.net
- DNS ASK mo####gstream.net
- DNS ASK ra####nothing.net
- DNS ASK al###bottle.net
- DNS ASK of###divide.net
- DNS ASK al####othing.net
- DNS ASK of###bottle.net
- DNS ASK al###divide.net
- DNS ASK mi####nothing.net
- DNS ASK tw####nothing.net
- DNS ASK mi####stream.net
- DNS ASK tw####stream.net
- ClassName: 'Shell_TrayWnd' WindowName: ''