Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Gateway RPC Isolation Virtual Telephony Power' = '<SYSTEM32>\vxmnbgi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Certificate Software Helper Studio User] 'ImagePath' = '<SYSTEM32>\vxmnbgi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Certificate Software Helper Studio User] 'Start' = '00000002'
- Центр обеспечения безопасности (Security Center)
- '<SYSTEM32>\lkpahds.exe' "<SYSTEM32>\vxmnbgi.exe"
- '%WINDIR%\Temp\bdyr2edamg1uhlq2s.exe' -r 20014 tcp
- '%TEMP%\bdyr2edg1f6dhlq2sabk3jfe.exe'
- '<SYSTEM32>\vxmnbgi.exe'
- <SYSTEM32>\pxmzmjk\run
- <SYSTEM32>\pxmzmjk\rng
- %WINDIR%\Temp\bdyr2edamg1uhlq2s.exe
- <SYSTEM32>\pxmzmjk\cfg
- %TEMP%\bdyr2edg1f6dhlq2sabk3jfe.exe
- <SYSTEM32>\pxmzmjk\tst
- <SYSTEM32>\lkpahds.exe
- <SYSTEM32>\vxmnbgi.exe
- <SYSTEM32>\lkpahds.exe
- <SYSTEM32>\vxmnbgi.exe
- %WINDIR%\Temp\bdyr2edamg1uhlq2s.exe
- %TEMP%\bdyr2edg1f6dhlq2sabk3jfe.exe
- 'de####ergrow.net':80
- 'al###tear.net':80
- 'de####ertear.net':80
- 'pu###ity.net':80
- 'fr###ycity.net':80
- 'al###grow.net':80
- 'de####ercity.net':80
- 'lo###ure.net':80
- 'so###ure.net':80
- 'al###thank.net':80
- 'de####erthank.net':80
- 'al###city.net':80
- 'de###hank.net':80
- 'sh###city.net':80
- 'de###ity.net':80
- 'sh###tear.net':80
- 'de###ear.net':80
- 'sh###thank.net':80
- 'fr###ytear.net':80
- 'pu###hank.net':80
- 'fr###ythank.net':80
- 'pu###row.net':80
- 'fr###ygrow.net':80
- 'pu###ear.net':80
- 'ba###ure.net':80
- 'st###march.net':80
- 'ba###arch.net':80
- 'wh###july.net':80
- 'sa###uly.net':80
- 'st###pure.net':80
- 'ba###uly.net':80
- 'en###pure.net':80
- 'li###ure.net':80
- 'st###dish.net':80
- 'ba###ish.net':80
- 'st###july.net':80
- 'so###ish.net':80
- 'lo###uly.net':80
- 'so###uly.net':80
- 'lo###arch.net':80
- 'so###arch.net':80
- 'lo###ish.net':80
- 'sa###arch.net':80
- 'wh###dish.net':80
- 'sa###ish.net':80
- 'wh###pure.net':80
- 'sa###ure.net':80
- 'wh###march.net':80
- 'sa###row.net':80
- 'wh###tear.net':80
- 'sa###ear.net':80
- 'lo###ity.net':80
- 'so###ity.net':80
- 'wh###grow.net':80
- 'sa###ity.net':80
- 'st###grow.net':80
- 'ba###row.net':80
- 'wh###thank.net':80
- 'sa###hank.net':80
- 'wh###city.net':80
- 'se####strong.net':80
- 'si######edwerryhouse.net':80
- 'mo####gduring.net':80
- 'or###thrown.net':80
- 'jo####ymeasure.net':80
- 'de####promise.net':80
- 'ri###nstorm.net':80
- 'ef###tbuilt.net':80
- 'th###while.net':80
- 'ch####nother.net':80
- 'gw#####ynhuddleston.net':80
- 'of####urprise.net':80
- 'ti###row.net':80
- 'mo###tear.net':80
- 'ti###ear.net':80
- 'en###city.net':80
- 'li###ity.net':80
- 'mo###grow.net':80
- 'ti###ity.net':80
- 'sh###grow.net':80
- 'de###row.net':80
- 'mo###thank.net':80
- 'ti###hank.net':80
- 'mo###city.net':80
- 'ba###hank.net':80
- 'st###city.net':80
- 'ba###ity.net':80
- 'st###tear.net':80
- 'ba###ear.net':80
- 'st###thank.net':80
- 'li###ear.net':80
- 'en###thank.net':80
- 'li###hank.net':80
- 'en###grow.net':80
- 'li###row.net':80
- 'en###tear.net':80
- http://de####ergrow.net/index.php
- http://al###tear.net/index.php
- http://de####ertear.net/index.php
- http://pu###ity.net/index.php
- http://fr###ycity.net/index.php
- http://al###grow.net/index.php
- http://de####ercity.net/index.php
- http://lo###ure.net/index.php
- http://so###ure.net/index.php
- http://al###thank.net/index.php
- http://de####erthank.net/index.php
- http://al###city.net/index.php
- http://de###hank.net/index.php
- http://sh###city.net/index.php
- http://de###ity.net/index.php
- http://sh###tear.net/index.php
- http://de###ear.net/index.php
- http://sh###thank.net/index.php
- http://fr###ytear.net/index.php
- http://pu###hank.net/index.php
- http://fr###ythank.net/index.php
- http://pu###row.net/index.php
- http://fr###ygrow.net/index.php
- http://pu###ear.net/index.php
- http://ba###ure.net/index.php
- http://st###march.net/index.php
- http://ba###arch.net/index.php
- http://wh###july.net/index.php
- http://sa###uly.net/index.php
- http://st###pure.net/index.php
- http://ba###uly.net/index.php
- http://en###pure.net/index.php
- http://li###ure.net/index.php
- http://st###dish.net/index.php
- http://ba###ish.net/index.php
- http://st###july.net/index.php
- http://so###ish.net/index.php
- http://lo###uly.net/index.php
- http://so###uly.net/index.php
- http://lo###arch.net/index.php
- http://so###arch.net/index.php
- http://lo###ish.net/index.php
- http://sa###arch.net/index.php
- http://wh###dish.net/index.php
- http://sa###ish.net/index.php
- http://wh###pure.net/index.php
- http://sa###ure.net/index.php
- http://wh###march.net/index.php
- http://sa###row.net/index.php
- http://wh###tear.net/index.php
- http://sa###ear.net/index.php
- http://lo###ity.net/index.php
- http://so###ity.net/index.php
- http://wh###grow.net/index.php
- http://sa###ity.net/index.php
- http://st###grow.net/index.php
- http://ba###row.net/index.php
- http://wh###thank.net/index.php
- http://sa###hank.net/index.php
- http://wh###city.net/index.php
- http://se####strong.net/index.php
- http://si######edwerryhouse.net/index.php
- http://mo####gduring.net/index.php
- http://or###thrown.net/index.php
- http://jo####ymeasure.net/index.php
- http://de####promise.net/index.php
- http://ri###nstorm.net/index.php
- http://ef###tbuilt.net/index.php
- http://th###while.net/index.php
- http://ch####nother.net/index.php
- http://gw#####ynhuddleston.net/index.php
- http://of####urprise.net/index.php
- http://ti###row.net/index.php
- http://mo###tear.net/index.php
- http://ti###ear.net/index.php
- http://en###city.net/index.php
- http://li###ity.net/index.php
- http://mo###grow.net/index.php
- http://ti###ity.net/index.php
- http://sh###grow.net/index.php
- http://de###row.net/index.php
- http://mo###thank.net/index.php
- http://ti###hank.net/index.php
- http://mo###city.net/index.php
- http://ba###hank.net/index.php
- http://st###city.net/index.php
- http://ba###ity.net/index.php
- http://st###tear.net/index.php
- http://ba###ear.net/index.php
- http://st###thank.net/index.php
- http://li###ear.net/index.php
- http://en###thank.net/index.php
- http://li###hank.net/index.php
- http://en###grow.net/index.php
- http://li###row.net/index.php
- http://en###tear.net/index.php
- DNS ASK de####ergrow.net
- DNS ASK al###tear.net
- DNS ASK de####ertear.net
- DNS ASK pu###ity.net
- DNS ASK fr###ycity.net
- DNS ASK al###grow.net
- DNS ASK de####ercity.net
- DNS ASK lo###ure.net
- DNS ASK so###ure.net
- DNS ASK al###thank.net
- DNS ASK de####erthank.net
- DNS ASK al###city.net
- DNS ASK de###hank.net
- DNS ASK sh###city.net
- DNS ASK de###ity.net
- DNS ASK sh###tear.net
- DNS ASK de###ear.net
- DNS ASK sh###thank.net
- DNS ASK fr###ytear.net
- DNS ASK pu###hank.net
- DNS ASK fr###ythank.net
- DNS ASK pu###row.net
- DNS ASK fr###ygrow.net
- DNS ASK pu###ear.net
- DNS ASK lo###arch.net
- DNS ASK st###march.net
- DNS ASK ba###arch.net
- DNS ASK st###dish.net
- DNS ASK sa###uly.net
- DNS ASK st###pure.net
- DNS ASK ba###ure.net
- DNS ASK en###pure.net
- DNS ASK li###ure.net
- DNS ASK en###march.net
- DNS ASK ba###ish.net
- DNS ASK st###july.net
- DNS ASK ba###uly.net
- DNS ASK lo###uly.net
- DNS ASK so###uly.net
- DNS ASK wh###pure.net
- DNS ASK so###arch.net
- DNS ASK lo###ish.net
- DNS ASK so###ish.net
- DNS ASK wh###dish.net
- DNS ASK sa###ish.net
- DNS ASK wh###july.net
- DNS ASK sa###ure.net
- DNS ASK wh###march.net
- DNS ASK sa###arch.net
- DNS ASK sa###row.net
- DNS ASK wh###tear.net
- DNS ASK sa###ear.net
- DNS ASK lo###ity.net
- DNS ASK so###ity.net
- DNS ASK wh###grow.net
- DNS ASK sa###ity.net
- DNS ASK st###grow.net
- DNS ASK ba###row.net
- DNS ASK wh###thank.net
- DNS ASK sa###hank.net
- DNS ASK wh###city.net
- DNS ASK se####strong.net
- DNS ASK si######edwerryhouse.net
- DNS ASK mo####gduring.net
- DNS ASK or###thrown.net
- DNS ASK jo####ymeasure.net
- DNS ASK de####promise.net
- DNS ASK ri###nstorm.net
- DNS ASK ef###tbuilt.net
- DNS ASK th###while.net
- DNS ASK ch####nother.net
- DNS ASK gw#####ynhuddleston.net
- DNS ASK of####urprise.net
- DNS ASK ti###row.net
- DNS ASK mo###tear.net
- DNS ASK ti###ear.net
- DNS ASK en###city.net
- DNS ASK li###ity.net
- DNS ASK mo###grow.net
- DNS ASK ti###ity.net
- DNS ASK sh###grow.net
- DNS ASK de###row.net
- DNS ASK mo###thank.net
- DNS ASK ti###hank.net
- DNS ASK mo###city.net
- DNS ASK ba###hank.net
- DNS ASK st###city.net
- DNS ASK ba###ity.net
- DNS ASK st###tear.net
- DNS ASK ba###ear.net
- DNS ASK st###thank.net
- DNS ASK li###ear.net
- DNS ASK en###thank.net
- DNS ASK li###hank.net
- DNS ASK en###grow.net
- DNS ASK li###row.net
- DNS ASK en###tear.net
- '23#.#55.255.250':1900