Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Store WLAN RPC BranchCache Port' = 'C:\dottoddcwoobjse\tkmevecyvf.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Logs Tunneling Authentication DLL Adapter Store] 'Start' = '00000002'
- 'C:\dottoddcwoobjse\mwlppsmpvoh.exe' "c:\dottoddcwoobjse\tkmevecyvf.exe"
- 'C:\dottoddcwoobjse\tkmevecyvf.exe'
- 'C:\dottoddcwoobjse\jh2piunnheyu4mfvq.exe'
- C:\dottoddcwoobjse\tkmevecyvf.exe
- C:\dottoddcwoobjse\mwlppsmpvoh.exe
- C:\dottoddcwoobjse\jyunppxuax5l
- %WINDIR%\dottoddcwoobjse\kvjf4qyclvz3
- C:\dottoddcwoobjse\kvjf4qyclvz3
- C:\dottoddcwoobjse\jh2piunnheyu4mfvq.exe
- C:\dottoddcwoobjse\mwlppsmpvoh.exe
- C:\dottoddcwoobjse\tkmevecyvf.exe
- C:\dottoddcwoobjse\jh2piunnheyu4mfvq.exe
- %WINDIR%\dottoddcwoobjse\kvjf4qyclvz3
- 'ca####nbattle.net':80
- 're###dheart.net':80
- 'ca####nmayor.net':80
- 'la###battle.net':80
- 'el####icperfect.net':80
- 're###dmayor.net':80
- 'el####icheart.net':80
- 're####perfect.net':80
- 'de####battle.net':80
- 'la###heart.net':80
- 'de###emayor.net':80
- 'ni###battle.net':80
- 'ca####nperfect.net':80
- 'la###mayor.net':80
- 'ca####nheart.net':80
- 'la####erfect.net':80
- 'tr###battle.net':80
- 'be###rheart.net':80
- 'tr###mayor.net':80
- 'st####battle.net':80
- 'ga####perfect.net':80
- 'be###rmayor.net':80
- 'ga###rheart.net':80
- 'be####perfect.net':80
- 'el####icbattle.net':80
- 'st###theart.net':80
- 'el####icmayor.net':80
- 're####battle.net':80
- 'tr####erfect.net':80
- 'st###tmayor.net':80
- 'tr###heart.net':80
- 'st####perfect.net':80
- 'br###white.net':80
- 'qu###toward.net':80
- 'br####illion.net':80
- 'fl###white.net':80
- 'se####pleasure.net':80
- 'qu####illion.net':80
- 'se####toward.net':80
- 'qu####leasure.net':80
- 'ga###rwhite.net':80
- 'fl###toward.net':80
- 'ga####million.net':80
- 'be###rwhite.net':80
- 'br####leasure.net':80
- 'fl####illion.net':80
- 'br###toward.net':80
- 'fl####leasure.net':80
- 'do###battle.net':80
- 'ni###heart.net':80
- 'do###mayor.net':80
- 'ag####tbattle.net':80
- 'de####perfect.net':80
- 'ni###mayor.net':80
- 'de###eheart.net':80
- 'ni####erfect.net':80
- 'se###nwhite.net':80
- 'ag####theart.net':80
- 'se####million.net':80
- 'qu###white.net':80
- 'do####erfect.net':80
- 'ag####tmayor.net':80
- 'do###heart.net':80
- 'ag####tperfect.net':80
- http://ca####nbattle.net/index.php?me########
- http://re###dheart.net/index.php?me########
- http://ca####nmayor.net/index.php?me########
- http://la###battle.net/index.php?me########
- http://el####icperfect.net/index.php?me########
- http://re###dmayor.net/index.php?me########
- http://el####icheart.net/index.php?me########
- http://re####perfect.net/index.php?me########
- http://de####battle.net/index.php?me########
- http://la###heart.net/index.php?me########
- http://de###emayor.net/index.php?me########
- http://ni###battle.net/index.php?me########
- http://ca####nperfect.net/index.php?me########
- http://la###mayor.net/index.php?me########
- http://ca####nheart.net/index.php?me########
- http://la####erfect.net/index.php?me########
- http://tr###battle.net/index.php?me########
- http://be###rheart.net/index.php?me########
- http://tr###mayor.net/index.php?me########
- http://st####battle.net/index.php?me########
- http://ga####perfect.net/index.php?me########
- http://be###rmayor.net/index.php?me########
- http://ga###rheart.net/index.php?me########
- http://be####perfect.net/index.php?me########
- http://el####icbattle.net/index.php?me########
- http://st###theart.net/index.php?me########
- http://el####icmayor.net/index.php?me########
- http://re####battle.net/index.php?me########
- http://tr####erfect.net/index.php?me########
- http://st###tmayor.net/index.php?me########
- http://tr###heart.net/index.php?me########
- http://st####perfect.net/index.php?me########
- http://br###white.net/index.php?me########
- http://qu###toward.net/index.php?me########
- http://br####illion.net/index.php?me########
- http://fl###white.net/index.php?me########
- http://se####pleasure.net/index.php?me########
- http://qu####illion.net/index.php?me########
- http://se####toward.net/index.php?me########
- http://qu####leasure.net/index.php?me########
- http://ga###rwhite.net/index.php?me########
- http://fl###toward.net/index.php?me########
- http://ga####million.net/index.php?me########
- http://be###rwhite.net/index.php?me########
- http://br####leasure.net/index.php?me########
- http://fl####illion.net/index.php?me########
- http://br###toward.net/index.php?me########
- http://fl####leasure.net/index.php?me########
- http://do###battle.net/index.php?me########
- http://ni###heart.net/index.php?me########
- http://do###mayor.net/index.php?me########
- http://ag####tbattle.net/index.php?me########
- http://de####perfect.net/index.php?me########
- http://ni###mayor.net/index.php?me########
- http://de###eheart.net/index.php?me########
- http://ni####erfect.net/index.php?me########
- http://se###nwhite.net/index.php?me########
- http://ag####theart.net/index.php?me########
- http://se####million.net/index.php?me########
- http://qu###white.net/index.php?me########
- http://do####erfect.net/index.php?me########
- http://ag####tmayor.net/index.php?me########
- http://do###heart.net/index.php?me########
- http://ag####tperfect.net/index.php?me########
- DNS ASK re###dheart.net
- DNS ASK el####icheart.net
- DNS ASK la###battle.net
- DNS ASK ca####nbattle.net
- DNS ASK re###dmayor.net
- DNS ASK el####icmayor.net
- DNS ASK re####perfect.net
- DNS ASK el####icperfect.net
- DNS ASK la###heart.net
- DNS ASK ca####nheart.net
- DNS ASK ni###battle.net
- DNS ASK de####battle.net
- DNS ASK la###mayor.net
- DNS ASK ca####nmayor.net
- DNS ASK la####erfect.net
- DNS ASK ca####nperfect.net
- DNS ASK be###rheart.net
- DNS ASK ga###rheart.net
- DNS ASK st####battle.net
- DNS ASK tr###battle.net
- DNS ASK be###rmayor.net
- DNS ASK ga###rmayor.net
- DNS ASK be####perfect.net
- DNS ASK ga####perfect.net
- DNS ASK st###theart.net
- DNS ASK tr###heart.net
- DNS ASK re####battle.net
- DNS ASK el####icbattle.net
- DNS ASK st###tmayor.net
- DNS ASK tr###mayor.net
- DNS ASK st####perfect.net
- DNS ASK tr####erfect.net
- DNS ASK de###emayor.net
- DNS ASK br###white.net
- DNS ASK qu###toward.net
- DNS ASK br####illion.net
- DNS ASK fl###white.net
- DNS ASK se####pleasure.net
- DNS ASK qu####illion.net
- DNS ASK se####toward.net
- DNS ASK qu####leasure.net
- DNS ASK ga###rwhite.net
- DNS ASK fl###toward.net
- DNS ASK ga####million.net
- DNS ASK be###rwhite.net
- DNS ASK br####leasure.net
- DNS ASK fl####illion.net
- DNS ASK br###toward.net
- DNS ASK fl####leasure.net
- DNS ASK do###battle.net
- DNS ASK ni###heart.net
- DNS ASK do###mayor.net
- DNS ASK ag####tbattle.net
- DNS ASK de####perfect.net
- DNS ASK ni###mayor.net
- DNS ASK de###eheart.net
- DNS ASK ni####erfect.net
- DNS ASK se###nwhite.net
- DNS ASK ag####theart.net
- DNS ASK se####million.net
- DNS ASK qu###white.net
- DNS ASK do####erfect.net
- DNS ASK ag####tmayor.net
- DNS ASK do###heart.net
- DNS ASK ag####tperfect.net
- ClassName: 'Shell_TrayWnd' WindowName: ''