Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'CNG Transaction Browser User-mode IKE Ordering' = 'C:\lnhfojx3\u1ngcgbqji.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Control Client Defragmenter Center] 'ImagePath' = 'C:\lnhfojx3\u1ngcgbqji.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Control Client Defragmenter Center] 'Start' = '00000002'
- 'C:\lnhfojx3\rmflrfnfofylx.exe' "c:\lnhfojx3\u1ngcgbqji.exe"
- 'C:\lnhfojx3\u1ngcgbqji.exe'
- 'C:\lnhfojx3\ljkrqnn2guchxzt7ujag.exe'
- C:\lnhfojx3\u1ngcgbqji.exe
- C:\lnhfojx3\rmflrfnfofylx.exe
- C:\lnhfojx3\erxenzvr1d
- %WINDIR%\lnhfojx3\bzukmtprwvfw
- C:\lnhfojx3\bzukmtprwvfw
- C:\lnhfojx3\ljkrqnn2guchxzt7ujag.exe
- C:\lnhfojx3\rmflrfnfofylx.exe
- C:\lnhfojx3\u1ngcgbqji.exe
- C:\lnhfojx3\ljkrqnn2guchxzt7ujag.exe
- %WINDIR%\lnhfojx3\bzukmtprwvfw
- 'gr###factory.cn':80
- 'pi##asia.cn':80
- 'ch#####anabrahamson.net':80
- 'ch######nswindlehurst.net':80
- 'un###lgrain.org':80
- 'ca#####eeitinthecup.org':80
- 'ga#####yundongyuan.cn':80
- 'ka#######ayajivayapriroda.ru':80
- 'pr####anabolikov.ru':80
- 'gw#####reabrahamson.net':80
- 'ka#####nematthewson.net':80
- 'ka######ecristiansen.net':80
- 'ce######eoutterridge.net':80
- 'al######routterridge.net':80
- 'al#####ermatthewson.net':80
- 'al######rcristiansen.net':80
- 'ka######eoutterridge.net':80
- 'al#####ermurgatroyd.ru':80
- 'ka#####nemurgatroyd.net':80
- 'si###ypeas.net':80
- 'cl####portsmen.com':80
- 'sp##tnav.ru':80
- 'pr##card.ru':80
- 'ag#####anabolics.com':80
- 'ha####nhalflion.net':80
- 'na##top.ru':80
- 'do##bate.cn':80
- 'ch####isportsmen.ru':80
- 'so####ryducks.com':80
- 'to###tosales.ru':80
- 'ga####liongrass.net':80
- 'bu####rmansion.com':80
- 'ye####gdongwu.cn':80
- 'sc#####epuzzlechess.org':80
- 'gu##155.cn':80
- 'cl#####ortswomen.com':80
- 'ta#####pielenreiten.org':80
- 'sc####ainbow.net':80
- http://gr###factory.cn/index.php
- http://pi##asia.cn/index.php
- http://ch#####anabrahamson.net/index.php
- http://ch######nswindlehurst.net/index.php
- http://un###lgrain.org/index.php
- http://ca#####eeitinthecup.org/index.php
- http://ga#####yundongyuan.cn/index.php
- http://ka#######ayajivayapriroda.ru/index.php
- http://pr####anabolikov.ru/index.php
- http://gw#####reabrahamson.net/index.php
- http://ka#####nematthewson.net/index.php
- http://ka######ecristiansen.net/index.php
- http://ce######eoutterridge.net/index.php
- http://al######routterridge.net/index.php
- http://al#####ermatthewson.net/index.php
- http://al######rcristiansen.net/index.php
- http://ka######eoutterridge.net/index.php
- http://al#####ermurgatroyd.ru/index.php
- http://ka#####nemurgatroyd.net/index.php
- http://si###ypeas.net/index.php
- http://cl####portsmen.com/index.php
- http://sp##tnav.ru/index.php
- http://pr##card.ru/index.php
- http://ag#####anabolics.com/index.php
- http://ha####nhalflion.net/index.php
- http://na##top.ru/index.php
- http://do##bate.cn/index.php
- http://ch####isportsmen.ru/index.php
- http://so####ryducks.com/index.php
- http://to###tosales.ru/index.php
- http://ga####liongrass.net/index.php
- http://bu####rmansion.com/index.php
- http://ye####gdongwu.cn/index.php
- http://sc#####epuzzlechess.org/index.php
- http://gu##155.cn/index.php
- http://cl#####ortswomen.com/index.php
- http://ta#####pielenreiten.org/index.php
- http://sc####ainbow.net/index.php
- DNS ASK gu#####enkristina.net
- DNS ASK gw#####rephilomena.net
- DNS ASK gu#####engallagher.net
- DNS ASK an#####lekristina.net
- DNS ASK gw#####refrederick.net
- DNS ASK ch#####anfrederick.net
- DNS ASK ch#####anphilomena.net
- DNS ASK gw#####refrederick.ru
- DNS ASK an#####lephilomena.net
- DNS ASK gu#####enphilomena.net
- DNS ASK ch#####lekristina.net
- DNS ASK an#####lephilomena.ru
- DNS ASK an#####legallagher.net
- DNS ASK gu#####engallagher.ru
- DNS ASK an#####lefrederick.net
- DNS ASK gu#####enfrederick.net
- DNS ASK ka#####neelizabeth.net
- DNS ASK al#####erelizabeth.net
- DNS ASK al#####erburgundy.net
- DNS ASK ka#####neelizabeth.ru
- DNS ASK ma#####najaqueline.net
- DNS ASK al#####rajaqueline.ru
- DNS ASK ka#####necherette.net
- DNS ASK al#####ercherette.net
- DNS ASK gw#####rekristina.net
- DNS ASK ch#####ankristina.ru
- DNS ASK gw#####regallagher.net
- DNS ASK ch#####angallagher.net
- DNS ASK al#####erjaqueline.net
- DNS ASK ka#####neburgundy.net
- DNS ASK ch#####ankristina.net
- DNS ASK ka#####nejaqueline.net
- DNS ASK ch#####negallagher.net
- DNS ASK sh#####legallagher.net
- DNS ASK sh#####lefrederick.net
- DNS ASK ch#####negallagher.ru
- DNS ASK ar#####ldphilomena.net
- DNS ASK za#####ahphilomena.ru
- DNS ASK ch#####nekristina.net
- DNS ASK sh#####lekristina.net
- DNS ASK am#####nekristina.net
- DNS ASK ce#####nekristina.ru
- DNS ASK am#####negallagher.net
- DNS ASK ce#####negallagher.net
- DNS ASK sh#####lephilomena.net
- DNS ASK ch#####nefrederick.net
- DNS ASK ce#####nekristina.net
- DNS ASK ch#####nephilomena.net
- DNS ASK ge#####nafrederick.net
- DNS ASK ch#####lefrederick.ru
- DNS ASK ge#####naphilomena.net
- DNS ASK ch#####lephilomena.net
- DNS ASK ch#####legallagher.net
- DNS ASK ge#####nakristina.net
- DNS ASK ch#####lefrederick.net
- DNS ASK ge#####nagallagher.net
- DNS ASK za#####ahfrederick.net
- DNS ASK ar#####ldgallagher.net
- DNS ASK za#####ahphilomena.net
- DNS ASK ar#####ldfrederick.net
- DNS ASK ar#####ldkristina.net
- DNS ASK za#####ahkristina.net
- DNS ASK za#####ahgallagher.net
- DNS ASK ar#####ldkristina.ru
- DNS ASK ge#####naelizabeth.net
- DNS ASK ch#####leelizabeth.net
- DNS ASK ch#####leburgundy.net
- DNS ASK ge#####naelizabeth.ru
- DNS ASK an#####lejaqueline.net
- DNS ASK gu#####enjaqueline.ru
- DNS ASK ge#####nacherette.net
- DNS ASK ch#####lecherette.net
- DNS ASK ar#####ldcherette.net
- DNS ASK za#####ahcherette.ru
- DNS ASK ar#####ldelizabeth.net
- DNS ASK za#####ahelizabeth.net
- DNS ASK ch#####lejaqueline.net
- DNS ASK ge#####naburgundy.net
- DNS ASK za#####ahcherette.net
- DNS ASK ge#####najaqueline.net
- DNS ASK gw#####reburgundy.net
- DNS ASK ch#####anburgundy.ru
- DNS ASK gw#####rejaqueline.net
- DNS ASK ch#####anjaqueline.net
- DNS ASK ch#####anelizabeth.net
- DNS ASK gw#####recherette.net
- DNS ASK ch#####anburgundy.net
- DNS ASK gw#####reelizabeth.net
- DNS ASK gu#####enburgundy.net
- DNS ASK an#####leelizabeth.net
- DNS ASK gu#####enjaqueline.net
- DNS ASK an#####leburgundy.net
- DNS ASK an#####lecherette.net
- DNS ASK gu#####encherette.net
- DNS ASK gu#####enelizabeth.net
- DNS ASK an#####lecherette.ru
- DNS ASK am#####neburgundy.net
- DNS ASK ce#####neburgundy.ru
- DNS ASK am#####nejaqueline.net
- DNS ASK ce#####nejaqueline.net
- DNS ASK ce#####neelizabeth.net
- DNS ASK am#####necherette.net
- DNS ASK ce#####neburgundy.net
- DNS ASK am#####neelizabeth.net
- DNS ASK al#####raburgundy.net
- DNS ASK ma#####naelizabeth.net
- DNS ASK al#####rajaqueline.net
- DNS ASK ma#####naburgundy.net
- DNS ASK ma#####nacherette.net
- DNS ASK al#####racherette.net
- DNS ASK al#####raelizabeth.net
- DNS ASK ma#####nacherette.ru
- DNS ASK sh#####lecherette.net
- DNS ASK ar#####ldjaqueline.net
- DNS ASK sh#####leelizabeth.net
- DNS ASK ch#####necherette.net
- DNS ASK ar#####ldburgundy.net
- DNS ASK za#####ahburgundy.net
- DNS ASK za#####ahjaqueline.net
- DNS ASK ar#####ldburgundy.ru
- DNS ASK ch#####nejaqueline.net
- DNS ASK sh#####lejaqueline.net
- DNS ASK ce#####necherette.net
- DNS ASK ch#####nejaqueline.ru
- DNS ASK ch#####neelizabeth.net
- DNS ASK sh#####leelizabeth.ru
- DNS ASK ch#####neburgundy.net
- DNS ASK sh#####leburgundy.net
- DNS ASK ce#####nefrederick.net
- DNS ASK am#####nematthewson.net
- DNS ASK sh######ecristiansen.net
- DNS ASK ch######ecristiansen.net
- DNS ASK ma#####nacristiansen.ru
- DNS ASK al#####ramurgatroyd.net
- DNS ASK ce#####nemurgatroyd.net
- DNS ASK ch######nswindlehurst.ru
- DNS ASK ma######acristiansen.net
- DNS ASK ka######ecristiansen.net
- DNS ASK ka#####nematthewson.net
- DNS ASK al#####ermurgatroyd.ru
- DNS ASK al#####ermatthewson.net
- DNS ASK ma#####namatthewson.net
- DNS ASK sh#####lematthewson.net
- DNS ASK al######routterridge.net
- DNS ASK ce######eoutterridge.net
- DNS ASK ka#####nematthewson.ru
- DNS ASK am#####nemurgatroyd.net
- DNS ASK ma######aoutterridge.net
- DNS ASK ma#####namurgatroyd.net
- DNS ASK ch#####nematthewson.net
- DNS ASK sh#####lematthewson.ru
- DNS ASK am######ecristiansen.net
- DNS ASK am#####nemurgatroyd.ru
- DNS ASK ce#####neoutterridge.ru
- DNS ASK al#####ramatthewson.net
- DNS ASK am######eoutterridge.net
- DNS ASK ce#####nematthewson.net
- DNS ASK al######acristiansen.net
- DNS ASK ch#####nemurgatroyd.net
- DNS ASK al######aoutterridge.net
- DNS ASK al#####ermurgatroyd.net
- DNS ASK cl#####ortswomen.com
- DNS ASK gu##155.cn
- DNS ASK sp##tnav.ru
- DNS ASK so####ryducks.com
- DNS ASK sc#####epuzzlechess.org
- DNS ASK ga####liongrass.net
- DNS ASK sc####ainbow.net
- DNS ASK ta#####pielenreiten.org
- DNS ASK ch####isportsmen.ru
- DNS ASK do##bate.cn
- DNS ASK na##top.ru
- DNS ASK ha####nhalflion.net
- DNS ASK si###ypeas.net
- DNS ASK pr##card.ru
- DNS ASK ag#####anabolics.com
- DNS ASK cl####portsmen.com
- DNS ASK ch######nswindlehurst.net
- DNS ASK ch#####anabrahamson.net
- DNS ASK pi##asia.cn
- DNS ASK gr###factory.cn
- DNS ASK al######rcristiansen.net
- DNS ASK ka#####nemurgatroyd.net
- DNS ASK gw#####reabrahamson.net
- DNS ASK ka######eoutterridge.net
- DNS ASK bu####rmansion.com
- DNS ASK ga#####yundongyuan.cn
- DNS ASK to###tosales.ru
- DNS ASK ye####gdongwu.cn
- DNS ASK ka#######ayajivayapriroda.ru
- DNS ASK un###lgrain.org
- DNS ASK ca#####eeitinthecup.org
- DNS ASK pr####anabolikov.ru
- DNS ASK al#####erphilomena.net
- DNS ASK ka#####nefrederick.net
- DNS ASK ch#####anmurgatroyd.net
- DNS ASK ka#####nephilomena.net
- DNS ASK ka#####negallagher.net
- DNS ASK al#####ergallagher.net
- DNS ASK al#####erfrederick.ru
- DNS ASK al#####erfrederick.net
- DNS ASK gw#####rematthewson.net
- DNS ASK ch#####anmatthewson.net
- DNS ASK ch#####anoutterridge.ru
- DNS ASK ch######noutterridge.net
- DNS ASK gw#####remurgatroyd.ru
- DNS ASK gw#####remurgatroyd.net
- DNS ASK gw######ecristiansen.net
- DNS ASK ch######ncristiansen.net
- DNS ASK ma#####nakristina.net
- DNS ASK al#####rakristina.net
- DNS ASK al#####ragallagher.ru
- DNS ASK al#####ragallagher.net
- DNS ASK am#####nefrederick.ru
- DNS ASK am#####nefrederick.net
- DNS ASK am#####nephilomena.net
- DNS ASK ce#####nephilomena.net
- DNS ASK ma#####naphilomena.ru
- DNS ASK ma#####naphilomena.net
- DNS ASK ka#####nekristina.net
- DNS ASK al#####erkristina.net
- DNS ASK al#####rafrederick.net
- DNS ASK ma#####nagallagher.net
- DNS ASK al#####raphilomena.net
- DNS ASK ma#####nafrederick.net
- DNS ASK za#####ahcristiansen.ru
- DNS ASK za######hcristiansen.net
- DNS ASK za#####ahmatthewson.net
- DNS ASK ar######dcristiansen.net
- DNS ASK ge######aoutterridge.net
- DNS ASK ge#####namatthewson.ru
- DNS ASK ar#####ldmurgatroyd.net
- DNS ASK za#####ahmurgatroyd.net
- DNS ASK ch######eoutterridge.net
- DNS ASK sh#####lemurgatroyd.net
- DNS ASK ce######ecristiansen.net
- DNS ASK sh######eoutterridge.net
- DNS ASK za######houtterridge.net
- DNS ASK ar#####ldmatthewson.net
- DNS ASK ar#####ldoutterridge.ru
- DNS ASK ar######doutterridge.net
- DNS ASK an#####lecristiansen.ru
- DNS ASK an######ecristiansen.net
- DNS ASK an#####lematthewson.net
- DNS ASK gu#####enmatthewson.net
- DNS ASK gu#####enmurgatroyd.net
- DNS ASK gw######eoutterridge.net
- DNS ASK gu######ncristiansen.net
- DNS ASK an#####lemurgatroyd.net
- DNS ASK ge######acristiansen.net
- DNS ASK ge#####namurgatroyd.net
- DNS ASK ge#####namatthewson.net
- DNS ASK ch#####lematthewson.net
- DNS ASK an######eoutterridge.net
- DNS ASK gu######noutterridge.net
- DNS ASK ch#####lemurgatroyd.ru
- DNS ASK ch#####lemurgatroyd.net