Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Source Access Superfetch Microsoft Endpoint' = 'C:\cxovvpd\ardijqgmktg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Offline Detection Function Log Visual] 'Start' = '00000002'
- 'C:\cxovvpd\shtpbuahclk.exe' "c:\cxovvpd\ardijqgmktg.exe"
- 'C:\cxovvpd\ardijqgmktg.exe'
- 'C:\cxovvpd\yhnk32laifohl8ufqit.exe'
- C:\cxovvpd\ardijqgmktg.exe
- C:\cxovvpd\shtpbuahclk.exe
- C:\cxovvpd\ehlclcsbh8g
- %WINDIR%\cxovvpd\oihwctmtn
- C:\cxovvpd\oihwctmtn
- C:\cxovvpd\yhnk32laifohl8ufqit.exe
- C:\cxovvpd\shtpbuahclk.exe
- C:\cxovvpd\ardijqgmktg.exe
- C:\cxovvpd\yhnk32laifohl8ufqit.exe
- %WINDIR%\cxovvpd\oihwctmtn
- 'ca####nfence.net':80
- 're####airplane.net':80
- 'la###fence.net':80
- 'la###guard.net':80
- 'ca####nguard.net':80
- 're###dguard.net':80
- 'el####icguard.net':80
- 'el#####cstraight.net':80
- 'el#####cairplane.net':80
- 're####straight.net':80
- 'ca####nstraight.net':80
- 'ni###guard.net':80
- 'de###eguard.net':80
- 'de####straight.net':80
- 'de####airplane.net':80
- 'ni####traight.net':80
- 'ca####nairplane.net':80
- 'la####traight.net':80
- 'la####irplane.net':80
- 'ni###fence.net':80
- 'de###efence.net':80
- 'be###rguard.net':80
- 'ga###rguard.net':80
- 'ga####straight.net':80
- 'ga####airplane.net':80
- 'be####straight.net':80
- 'br####irplane.net':80
- 'fl####traight.net':80
- 'fl####irplane.net':80
- 'be###rfence.net':80
- 'ga###rfence.net':80
- 'be####airplane.net':80
- 'tr####irplane.net':80
- 'st####straight.net':80
- 'st####airplane.net':80
- 're###dfence.net':80
- 'el####icfence.net':80
- 'st###tfence.net':80
- 'tr###fence.net':80
- 'tr###guard.net':80
- 'tr####traight.net':80
- 'st###tguard.net':80
- 'ni####irplane.net':80
- 'be####success.net':80
- 'ga####success.net':80
- 'ga####spring.net':80
- 'ga###rfound.net':80
- 'be####spring.net':80
- 'br###found.net':80
- 'fl###spring.net':80
- 'fl###found.net':80
- 'be####banker.net':80
- 'ga####banker.net':80
- 'be###rfound.net':80
- 'tr###found.net':80
- 'st####spring.net':80
- 'st###tfound.net':80
- 're####banker.net':80
- 'el####icbanker.net':80
- 'st####banker.net':80
- 'tr###banker.net':80
- 'tr####uccess.net':80
- 'tr###spring.net':80
- 'st####success.net':80
- 'do####irplane.net':80
- 'ag####tstraight.net':80
- 'ag####tairplane.net':80
- 'qu###banker.net':80
- 'se####banker.net':80
- 'ag####tfence.net':80
- 'do###fence.net':80
- 'do###guard.net':80
- 'do####traight.net':80
- 'ag####tguard.net':80
- 'se####success.net':80
- 'fl###banker.net':80
- 'br###banker.net':80
- 'br####uccess.net':80
- 'br###spring.net':80
- 'fl####uccess.net':80
- 'se####spring.net':80
- 'qu####uccess.net':80
- 'qu###spring.net':80
- 'qu###found.net':80
- 'se###nfound.net':80
- http://ca####nfence.net/index.php
- http://re####airplane.net/index.php
- http://la###fence.net/index.php
- http://la###guard.net/index.php
- http://ca####nguard.net/index.php
- http://re###dguard.net/index.php
- http://el####icguard.net/index.php
- http://el#####cstraight.net/index.php
- http://el#####cairplane.net/index.php
- http://re####straight.net/index.php
- http://ca####nstraight.net/index.php
- http://ni###guard.net/index.php
- http://de###eguard.net/index.php
- http://de####straight.net/index.php
- http://de####airplane.net/index.php
- http://ni####traight.net/index.php
- http://ca####nairplane.net/index.php
- http://la####traight.net/index.php
- http://la####irplane.net/index.php
- http://ni###fence.net/index.php
- http://de###efence.net/index.php
- http://be###rguard.net/index.php
- http://ga###rguard.net/index.php
- http://ga####straight.net/index.php
- http://ga####airplane.net/index.php
- http://be####straight.net/index.php
- http://br####irplane.net/index.php
- http://fl####traight.net/index.php
- http://fl####irplane.net/index.php
- http://be###rfence.net/index.php
- http://ga###rfence.net/index.php
- http://be####airplane.net/index.php
- http://tr####irplane.net/index.php
- http://st####straight.net/index.php
- http://st####airplane.net/index.php
- http://re###dfence.net/index.php
- http://el####icfence.net/index.php
- http://st###tfence.net/index.php
- http://tr###fence.net/index.php
- http://tr###guard.net/index.php
- http://tr####traight.net/index.php
- http://st###tguard.net/index.php
- http://ni####irplane.net/index.php
- http://be####success.net/index.php
- http://ga####success.net/index.php
- http://ga####spring.net/index.php
- http://ga###rfound.net/index.php
- http://be####spring.net/index.php
- http://br###found.net/index.php
- http://fl###spring.net/index.php
- http://fl###found.net/index.php
- http://be####banker.net/index.php
- http://ga####banker.net/index.php
- http://be###rfound.net/index.php
- http://tr###found.net/index.php
- http://st####spring.net/index.php
- http://st###tfound.net/index.php
- http://re####banker.net/index.php
- http://el####icbanker.net/index.php
- http://st####banker.net/index.php
- http://tr###banker.net/index.php
- http://tr####uccess.net/index.php
- http://tr###spring.net/index.php
- http://st####success.net/index.php
- http://do####irplane.net/index.php
- http://ag####tstraight.net/index.php
- http://ag####tairplane.net/index.php
- http://qu###banker.net/index.php
- http://se####banker.net/index.php
- http://ag####tfence.net/index.php
- http://do###fence.net/index.php
- http://do###guard.net/index.php
- http://do####traight.net/index.php
- http://ag####tguard.net/index.php
- http://se####success.net/index.php
- http://fl###banker.net/index.php
- http://br###banker.net/index.php
- http://br####uccess.net/index.php
- http://br###spring.net/index.php
- http://fl####uccess.net/index.php
- http://se####spring.net/index.php
- http://qu####uccess.net/index.php
- http://qu###spring.net/index.php
- http://qu###found.net/index.php
- http://se###nfound.net/index.php
- DNS ASK ca####nfence.net
- DNS ASK re####airplane.net
- DNS ASK la###fence.net
- DNS ASK la###guard.net
- DNS ASK ca####nguard.net
- DNS ASK re###dguard.net
- DNS ASK el####icguard.net
- DNS ASK el#####cstraight.net
- DNS ASK el#####cairplane.net
- DNS ASK re####straight.net
- DNS ASK ca####nstraight.net
- DNS ASK ni###guard.net
- DNS ASK de###eguard.net
- DNS ASK de####straight.net
- DNS ASK de####airplane.net
- DNS ASK ni####traight.net
- DNS ASK ca####nairplane.net
- DNS ASK la####traight.net
- DNS ASK la####irplane.net
- DNS ASK ni###fence.net
- DNS ASK de###efence.net
- DNS ASK re###dfence.net
- DNS ASK ga###rguard.net
- DNS ASK be###rfence.net
- DNS ASK be###rguard.net
- DNS ASK be####straight.net
- DNS ASK ga####straight.net
- DNS ASK fl####traight.net
- DNS ASK br####traight.net
- DNS ASK br####irplane.net
- DNS ASK ga###rfence.net
- DNS ASK fl####irplane.net
- DNS ASK ga####airplane.net
- DNS ASK st####straight.net
- DNS ASK tr####traight.net
- DNS ASK tr####irplane.net
- DNS ASK el####icfence.net
- DNS ASK st####airplane.net
- DNS ASK tr###fence.net
- DNS ASK be####airplane.net
- DNS ASK st###tfence.net
- DNS ASK st###tguard.net
- DNS ASK tr###guard.net
- DNS ASK be####success.net
- DNS ASK ga####success.net
- DNS ASK ga####spring.net
- DNS ASK ga###rfound.net
- DNS ASK be####spring.net
- DNS ASK br###found.net
- DNS ASK fl###spring.net
- DNS ASK fl###found.net
- DNS ASK be####banker.net
- DNS ASK ga####banker.net
- DNS ASK be###rfound.net
- DNS ASK tr###found.net
- DNS ASK st####spring.net
- DNS ASK st###tfound.net
- DNS ASK re####banker.net
- DNS ASK el####icbanker.net
- DNS ASK st####banker.net
- DNS ASK tr###banker.net
- DNS ASK tr####uccess.net
- DNS ASK tr###spring.net
- DNS ASK st####success.net
- DNS ASK br###spring.net
- DNS ASK ag####tstraight.net
- DNS ASK do####traight.net
- DNS ASK do####irplane.net
- DNS ASK se####banker.net
- DNS ASK ag####tairplane.net
- DNS ASK do###fence.net
- DNS ASK ni####irplane.net
- DNS ASK ag####tfence.net
- DNS ASK ag####tguard.net
- DNS ASK do###guard.net
- DNS ASK qu###banker.net
- DNS ASK br###banker.net
- DNS ASK qu###found.net
- DNS ASK fl###banker.net
- DNS ASK fl####uccess.net
- DNS ASK br####uccess.net
- DNS ASK qu####uccess.net
- DNS ASK se####success.net
- DNS ASK se####spring.net
- DNS ASK se###nfound.net
- DNS ASK qu###spring.net
- ClassName: 'Shell_TrayWnd' WindowName: ''