Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Tracking WMI Extensible Window Image' = 'C:\fogvtiuqotc\zmngzlyx.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Spooler Image Resolution Credential] 'ImagePath' = 'C:\fogvtiuqotc\zmngzlyx.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Spooler Image Resolution Credential] 'Start' = '00000002'
- 'C:\fogvtiuqotc\hqgltmjusxjt.exe' "c:\fogvtiuqotc\zmngzlyx.exe"
- 'C:\fogvtiuqotc\zmngzlyx.exe'
- 'C:\fogvtiuqotc\e1tc3dr8gmveaquiuba.exe'
- C:\fogvtiuqotc\zmngzlyx.exe
- C:\fogvtiuqotc\hqgltmjusxjt.exe
- C:\fogvtiuqotc\svbwhql
- %WINDIR%\fogvtiuqotc\sm2amjaxkalg
- C:\fogvtiuqotc\sm2amjaxkalg
- C:\fogvtiuqotc\e1tc3dr8gmveaquiuba.exe
- C:\fogvtiuqotc\hqgltmjusxjt.exe
- C:\fogvtiuqotc\zmngzlyx.exe
- C:\fogvtiuqotc\e1tc3dr8gmveaquiuba.exe
- %WINDIR%\fogvtiuqotc\sm2amjaxkalg
- 'ma#####lairplane.net':80
- 'se####lstraight.net':80
- 'pr####lyfence.net':80
- 'se####lairplane.net':80
- 'ma#####lstraight.net':80
- 'se####lfence.net':80
- 'ma####alfence.net':80
- 'se####lguard.net':80
- 'ma####alguard.net':80
- 'sw###fence.net':80
- 'le###fence.net':80
- 'sw####irplane.net':80
- 'le###guard.net':80
- 'fi###hfence.net':80
- 'pr#####yairplane.net':80
- 'sw###guard.net':80
- 'pr####lyguard.net':80
- 'sw####traight.net':80
- 'pr#####ystraight.net':80
- 'ge#####antogether.net':80
- 'al####ytogether.net':80
- 'ge####manspent.net':80
- 'al####yspent.net':80
- 'ge#####ancontrol.net':80
- 'me####matter.net':80
- 'fo###wspent.net':80
- 'al####ycontrol.net':80
- 'fo####matter.net':80
- 'al####ymatter.net':80
- 'fr###spent.net':80
- 'ex####encespent.net':80
- 'fr###matter.net':80
- 'ex#####ncematter.net':80
- 'fr####ogether.net':80
- 'ex#####ncecontrol.net':80
- 'ge####manmatter.net':80
- 'ex#####ncetogether.net':80
- 'fr####ontrol.net':80
- 'po#####eairplane.net':80
- 'mo#####nstraight.net':80
- 'mo###rfence.net':80
- 'mo#####nairplane.net':80
- 'po#####estraight.net':80
- 'mo####infence.net':80
- 'po####lefence.net':80
- 'mo####inguard.net':80
- 'po####leguard.net':80
- 'si###efence.net':80
- 'la###fence.net':80
- 'si####airplane.net':80
- 'la###guard.net':80
- 'se###afence.net':80
- 'mo####airplane.net':80
- 'si###eguard.net':80
- 'mo###rguard.net':80
- 'si####straight.net':80
- 'mo####straight.net':80
- 'wi###rfence.net':80
- 'su####tfence.net':80
- 'wi###rguard.net':80
- 'su####tguard.net':80
- 'fi####airplane.net':80
- 'le####traight.net':80
- 'fi###hguard.net':80
- 'le####irplane.net':80
- 'fi####straight.net':80
- 'su####tstraight.net':80
- 'pe####sstraight.net':80
- 'wi####straight.net':80
- 'pe####sairplane.net':80
- 'wi####airplane.net':80
- 'pe####sguard.net':80
- 'wi###wfence.net':80
- 'su####tairplane.net':80
- 'wi###wguard.net':80
- 'pe####sfence.net':80
- http://ma#####lairplane.net/index.php
- http://se####lstraight.net/index.php
- http://pr####lyfence.net/index.php
- http://se####lairplane.net/index.php
- http://ma#####lstraight.net/index.php
- http://se####lfence.net/index.php
- http://ma####alfence.net/index.php
- http://se####lguard.net/index.php
- http://ma####alguard.net/index.php
- http://sw###fence.net/index.php
- http://le###fence.net/index.php
- http://sw####irplane.net/index.php
- http://le###guard.net/index.php
- http://fi###hfence.net/index.php
- http://pr#####yairplane.net/index.php
- http://sw###guard.net/index.php
- http://pr####lyguard.net/index.php
- http://sw####traight.net/index.php
- http://pr#####ystraight.net/index.php
- http://ge#####antogether.net/index.php
- http://al####ytogether.net/index.php
- http://ge####manspent.net/index.php
- http://al####yspent.net/index.php
- http://ge#####ancontrol.net/index.php
- http://me####matter.net/index.php
- http://fo###wspent.net/index.php
- http://al####ycontrol.net/index.php
- http://fo####matter.net/index.php
- http://al####ymatter.net/index.php
- http://fr###spent.net/index.php
- http://ex####encespent.net/index.php
- http://fr###matter.net/index.php
- http://ex#####ncematter.net/index.php
- http://fr####ogether.net/index.php
- http://ex#####ncecontrol.net/index.php
- http://ge####manmatter.net/index.php
- http://ex#####ncetogether.net/index.php
- http://fr####ontrol.net/index.php
- http://po#####eairplane.net/index.php
- http://mo#####nstraight.net/index.php
- http://mo###rfence.net/index.php
- http://mo#####nairplane.net/index.php
- http://po#####estraight.net/index.php
- http://mo####infence.net/index.php
- http://po####lefence.net/index.php
- http://mo####inguard.net/index.php
- http://po####leguard.net/index.php
- http://si###efence.net/index.php
- http://la###fence.net/index.php
- http://si####airplane.net/index.php
- http://la###guard.net/index.php
- http://se###afence.net/index.php
- http://mo####airplane.net/index.php
- http://si###eguard.net/index.php
- http://mo###rguard.net/index.php
- http://si####straight.net/index.php
- http://mo####straight.net/index.php
- http://wi###rfence.net/index.php
- http://su####tfence.net/index.php
- http://wi###rguard.net/index.php
- http://su####tguard.net/index.php
- http://fi####airplane.net/index.php
- http://le####traight.net/index.php
- http://fi###hguard.net/index.php
- http://le####irplane.net/index.php
- http://fi####straight.net/index.php
- http://su####tstraight.net/index.php
- http://pe####sstraight.net/index.php
- http://wi####straight.net/index.php
- http://pe####sairplane.net/index.php
- http://wi####airplane.net/index.php
- http://pe####sguard.net/index.php
- http://wi###wfence.net/index.php
- http://su####tairplane.net/index.php
- http://wi###wguard.net/index.php
- http://pe####sfence.net/index.php
- DNS ASK se####lstraight.net
- DNS ASK ma#####lstraight.net
- DNS ASK se####lairplane.net
- DNS ASK ma#####lairplane.net
- DNS ASK se####lguard.net
- DNS ASK ma####alfence.net
- DNS ASK fr###matter.net
- DNS ASK ma####alguard.net
- DNS ASK se####lfence.net
- DNS ASK pr####lyfence.net
- DNS ASK sw####irplane.net
- DNS ASK pr#####yairplane.net
- DNS ASK fi###hfence.net
- DNS ASK le###fence.net
- DNS ASK sw####traight.net
- DNS ASK pr####lyguard.net
- DNS ASK sw###fence.net
- DNS ASK pr#####ystraight.net
- DNS ASK sw###guard.net
- DNS ASK al####ytogether.net
- DNS ASK ge#####ancontrol.net
- DNS ASK al####yspent.net
- DNS ASK ge#####antogether.net
- DNS ASK al####ycontrol.net
- DNS ASK fo###wspent.net
- DNS ASK me###rspent.net
- DNS ASK fo####matter.net
- DNS ASK me####matter.net
- DNS ASK ge####manspent.net
- DNS ASK ex####encespent.net
- DNS ASK fr####ogether.net
- DNS ASK ex#####ncematter.net
- DNS ASK fr###spent.net
- DNS ASK ex#####ncetogether.net
- DNS ASK ge####manmatter.net
- DNS ASK al####ymatter.net
- DNS ASK fr####ontrol.net
- DNS ASK ex#####ncecontrol.net
- DNS ASK le###guard.net
- DNS ASK po#####eairplane.net
- DNS ASK mo#####nstraight.net
- DNS ASK mo###rfence.net
- DNS ASK mo#####nairplane.net
- DNS ASK po#####estraight.net
- DNS ASK mo####infence.net
- DNS ASK po####lefence.net
- DNS ASK mo####inguard.net
- DNS ASK po####leguard.net
- DNS ASK si###efence.net
- DNS ASK la###fence.net
- DNS ASK si####airplane.net
- DNS ASK la###guard.net
- DNS ASK se###afence.net
- DNS ASK mo####airplane.net
- DNS ASK si###eguard.net
- DNS ASK mo###rguard.net
- DNS ASK si####straight.net
- DNS ASK mo####straight.net
- DNS ASK wi###rfence.net
- DNS ASK su####tfence.net
- DNS ASK wi###rguard.net
- DNS ASK su####tguard.net
- DNS ASK fi####airplane.net
- DNS ASK le####traight.net
- DNS ASK fi###hguard.net
- DNS ASK le####irplane.net
- DNS ASK fi####straight.net
- DNS ASK su####tstraight.net
- DNS ASK pe####sstraight.net
- DNS ASK wi####straight.net
- DNS ASK pe####sairplane.net
- DNS ASK wi####airplane.net
- DNS ASK pe####sguard.net
- DNS ASK wi###wfence.net
- DNS ASK su####tairplane.net
- DNS ASK wi###wguard.net
- DNS ASK pe####sfence.net
- ClassName: 'Shell_TrayWnd' WindowName: ''