Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Connection DCOM Control Topology Adapter' = 'C:\pwrzfdxpzxtmjw\cjziwdjjq.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Application Gateway Class Superfetch Remote] 'Start' = '00000002'
- 'C:\pwrzfdxpzxtmjw\yhnhqid.exe' "c:\pwrzfdxpzxtmjw\cjziwdjjq.exe"
- 'C:\pwrzfdxpzxtmjw\cjziwdjjq.exe'
- 'C:\pwrzfdxpzxtmjw\uzpe2ncqqealaopgb2y.exe'
- C:\pwrzfdxpzxtmjw\cjziwdjjq.exe
- C:\pwrzfdxpzxtmjw\yhnhqid.exe
- C:\pwrzfdxpzxtmjw\miiqpw0vtrd
- %WINDIR%\pwrzfdxpzxtmjw\rvvqnlxb
- C:\pwrzfdxpzxtmjw\rvvqnlxb
- C:\pwrzfdxpzxtmjw\uzpe2ncqqealaopgb2y.exe
- C:\pwrzfdxpzxtmjw\yhnhqid.exe
- C:\pwrzfdxpzxtmjw\cjziwdjjq.exe
- C:\pwrzfdxpzxtmjw\uzpe2ncqqealaopgb2y.exe
- %WINDIR%\pwrzfdxpzxtmjw\rvvqnlxb
- 'qu###battle.net':80
- 'se####battle.net':80
- 'qu###mayor.net':80
- 'se###nmayor.net':80
- 'th###almost.net':80
- 'pr####treason.net':80
- 'th####rderly.net':80
- 'pr####talmost.net':80
- 'th###reason.net':80
- 'se####perfect.net':80
- 'fl###mayor.net':80
- 'br###mayor.net':80
- 'fl####erfect.net':80
- 'br####erfect.net':80
- 'fl###battle.net':80
- 'se###nheart.net':80
- 'qu####erfect.net':80
- 'br###battle.net':80
- 'qu###heart.net':80
- 'pr####torderly.net':80
- 'of###reason.net':80
- 'al###reason.net':80
- 'of###almost.net':80
- 'al###almost.net':80
- 'of####rderly.net':80
- 'al###value.net':80
- 'mi####almost.net':80
- 'al####rderly.net':80
- 'of###value.net':80
- 'co####evalue.net':80
- 'ch###almost.net':80
- 'co####ealmost.net':80
- 'th###value.net':80
- 'pr####tvalue.net':80
- 'ch###reason.net':80
- 'co####eorderly.net':80
- 'ch###value.net':80
- 'co####ereason.net':80
- 'ch####rderly.net':80
- 'br###heart.net':80
- 'la###battle.net':80
- 'ca####nbattle.net':80
- 'la###mayor.net':80
- 'ca####nmayor.net':80
- 're###dheart.net':80
- 'el####icperfect.net':80
- 're###dmayor.net':80
- 'el####icheart.net':80
- 're####perfect.net':80
- 'ca####nperfect.net':80
- 'ni###mayor.net':80
- 'de###emayor.net':80
- 'ni####erfect.net':80
- 'de####perfect.net':80
- 'ni###battle.net':80
- 'ca####nheart.net':80
- 'la####erfect.net':80
- 'de####battle.net':80
- 'la###heart.net':80
- 'el####icmayor.net':80
- 'be####perfect.net':80
- 'ga####perfect.net':80
- 'be###rheart.net':80
- 'ga###rheart.net':80
- 'be###rmayor.net':80
- 'ga####battle.net':80
- 'fl###heart.net':80
- 'ga###rmayor.net':80
- 'be####battle.net':80
- 'tr###battle.net':80
- 'st###theart.net':80
- 'tr###heart.net':80
- 're####battle.net':80
- 'el####icbattle.net':80
- 'st####perfect.net':80
- 'tr###mayor.net':80
- 'st####battle.net':80
- 'tr####erfect.net':80
- 'st###tmayor.net':80
- http://qu###battle.net/index.php?me########
- http://se####battle.net/index.php?me########
- http://qu###mayor.net/index.php?me########
- http://se###nmayor.net/index.php?me########
- http://th###almost.net/index.php?me########
- http://pr####treason.net/index.php?me########
- http://th####rderly.net/index.php?me########
- http://pr####talmost.net/index.php?me########
- http://th###reason.net/index.php?me########
- http://se####perfect.net/index.php?me########
- http://fl###mayor.net/index.php?me########
- http://br###mayor.net/index.php?me########
- http://fl####erfect.net/index.php?me########
- http://br####erfect.net/index.php?me########
- http://fl###battle.net/index.php?me########
- http://se###nheart.net/index.php?me########
- http://qu####erfect.net/index.php?me########
- http://br###battle.net/index.php?me########
- http://qu###heart.net/index.php?me########
- http://pr####torderly.net/index.php?me########
- http://of###reason.net/index.php?me########
- http://al###reason.net/index.php?me########
- http://of###almost.net/index.php?me########
- http://al###almost.net/index.php?me########
- http://of####rderly.net/index.php?me########
- http://al###value.net/index.php?me########
- http://mi####almost.net/index.php?me########
- http://al####rderly.net/index.php?me########
- http://of###value.net/index.php?me########
- http://co####evalue.net/index.php?me########
- http://ch###almost.net/index.php?me########
- http://co####ealmost.net/index.php?me########
- http://th###value.net/index.php?me########
- http://pr####tvalue.net/index.php?me########
- http://ch###reason.net/index.php?me########
- http://co####eorderly.net/index.php?me########
- http://ch###value.net/index.php?me########
- http://co####ereason.net/index.php?me########
- http://ch####rderly.net/index.php?me########
- http://br###heart.net/index.php?me########
- http://la###battle.net/index.php?me########
- http://ca####nbattle.net/index.php?me########
- http://la###mayor.net/index.php?me########
- http://ca####nmayor.net/index.php?me########
- http://re###dheart.net/index.php?me########
- http://el####icperfect.net/index.php?me########
- http://re###dmayor.net/index.php?me########
- http://el####icheart.net/index.php?me########
- http://re####perfect.net/index.php?me########
- http://ca####nperfect.net/index.php?me########
- http://ni###mayor.net/index.php?me########
- http://de###emayor.net/index.php?me########
- http://ni####erfect.net/index.php?me########
- http://de####perfect.net/index.php?me########
- http://ni###battle.net/index.php?me########
- http://ca####nheart.net/index.php?me########
- http://la####erfect.net/index.php?me########
- http://de####battle.net/index.php?me########
- http://la###heart.net/index.php?me########
- http://el####icmayor.net/index.php?me########
- http://be####perfect.net/index.php?me########
- http://ga####perfect.net/index.php?me########
- http://be###rheart.net/index.php?me########
- http://ga###rheart.net/index.php?me########
- http://be###rmayor.net/index.php?me########
- http://ga####battle.net/index.php?me########
- http://fl###heart.net/index.php?me########
- http://ga###rmayor.net/index.php?me########
- http://be####battle.net/index.php?me########
- http://tr###battle.net/index.php?me########
- http://st###theart.net/index.php?me########
- http://tr###heart.net/index.php?me########
- http://re####battle.net/index.php?me########
- http://el####icbattle.net/index.php?me########
- http://st####perfect.net/index.php?me########
- http://tr###mayor.net/index.php?me########
- http://st####battle.net/index.php?me########
- http://tr####erfect.net/index.php?me########
- http://st###tmayor.net/index.php?me########
- DNS ASK se####battle.net
- DNS ASK th###almost.net
- DNS ASK qu###battle.net
- DNS ASK qu###mayor.net
- DNS ASK se###nmayor.net
- DNS ASK th####rderly.net
- DNS ASK pr####torderly.net
- DNS ASK pr####treason.net
- DNS ASK pr####talmost.net
- DNS ASK th###reason.net
- DNS ASK br###mayor.net
- DNS ASK fl###battle.net
- DNS ASK fl###mayor.net
- DNS ASK fl####erfect.net
- DNS ASK br####erfect.net
- DNS ASK qu####erfect.net
- DNS ASK se####perfect.net
- DNS ASK se###nheart.net
- DNS ASK br###battle.net
- DNS ASK qu###heart.net
- DNS ASK al###reason.net
- DNS ASK of####rderly.net
- DNS ASK of###reason.net
- DNS ASK of###almost.net
- DNS ASK al###almost.net
- DNS ASK mi####almost.net
- DNS ASK tw####almost.net
- DNS ASK al###value.net
- DNS ASK al####rderly.net
- DNS ASK of###value.net
- DNS ASK co####ealmost.net
- DNS ASK ch###reason.net
- DNS ASK ch###almost.net
- DNS ASK th###value.net
- DNS ASK pr####tvalue.net
- DNS ASK ch###value.net
- DNS ASK co####evalue.net
- DNS ASK co####eorderly.net
- DNS ASK co####ereason.net
- DNS ASK ch####rderly.net
- DNS ASK ca####nbattle.net
- DNS ASK re###dheart.net
- DNS ASK la###battle.net
- DNS ASK la###mayor.net
- DNS ASK ca####nmayor.net
- DNS ASK re###dmayor.net
- DNS ASK el####icmayor.net
- DNS ASK el####icperfect.net
- DNS ASK el####icheart.net
- DNS ASK re####perfect.net
- DNS ASK de###emayor.net
- DNS ASK ni###battle.net
- DNS ASK ni###mayor.net
- DNS ASK ni####erfect.net
- DNS ASK de####perfect.net
- DNS ASK la####erfect.net
- DNS ASK ca####nperfect.net
- DNS ASK ca####nheart.net
- DNS ASK de####battle.net
- DNS ASK la###heart.net
- DNS ASK ga####perfect.net
- DNS ASK be###rmayor.net
- DNS ASK be####perfect.net
- DNS ASK be###rheart.net
- DNS ASK ga###rheart.net
- DNS ASK fl###heart.net
- DNS ASK br###heart.net
- DNS ASK ga####battle.net
- DNS ASK ga###rmayor.net
- DNS ASK be####battle.net
- DNS ASK tr###heart.net
- DNS ASK st####perfect.net
- DNS ASK st###theart.net
- DNS ASK re####battle.net
- DNS ASK el####icbattle.net
- DNS ASK st####battle.net
- DNS ASK tr###battle.net
- DNS ASK tr###mayor.net
- DNS ASK tr####erfect.net
- DNS ASK st###tmayor.net
- ClassName: 'Shell_TrayWnd' WindowName: ''