Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Smart Distributed Bluetooth Adapter' = 'C:\dnborvlz\uaeujefnfo.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Thread Support NetBIOS Files WebClient] 'Start' = '00000002'
- 'C:\dnborvlz\zfzyoloqkkeh.exe' "c:\dnborvlz\uaeujefnfo.exe"
- 'C:\dnborvlz\uaeujefnfo.exe'
- 'C:\dnborvlz\j4qz2ovemptgyaszejm.exe'
- C:\dnborvlz\uaeujefnfo.exe
- C:\dnborvlz\zfzyoloqkkeh.exe
- C:\dnborvlz\j4qz2ovemptgyaszejm.exe
- %WINDIR%\dnborvlz\fxqfge
- C:\dnborvlz\fxqfge
- C:\dnborvlz\zfzyoloqkkeh.exe
- C:\dnborvlz\uaeujefnfo.exe
- C:\dnborvlz\j4qz2ovemptgyaszejm.exe
- %WINDIR%\dnborvlz\fxqfge
- 'fi###eproud.net':80
- 'th###hproud.net':80
- 'fi####around.net':80
- 'th####around.net':80
- 'pi####ewelcome.net':80
- 'ci#####tewelcome.net':80
- 'fi####complete.net':80
- 'th####complete.net':80
- 'wh####rproud.net':80
- 'ri###proud.net':80
- 'wh####raround.net':80
- 'ri###around.net':80
- 'fi####welcome.net':80
- 'th####welcome.net':80
- 'wh####rcomplete.net':80
- 'ri####omplete.net':80
- 'ch####enproud.net':80
- 'fa###yproud.net':80
- 'ch####enaround.net':80
- 'fa####around.net':80
- 'ei####welcome.net':80
- 'en####hwelcome.net':80
- 'ch#####ncomplete.net':80
- 'fa####complete.net':80
- 'pi####eproud.net':80
- 'ci####tteproud.net':80
- 'pi####earound.net':80
- 'ci####ttearound.net':80
- 'ch####enwelcome.net':80
- 'fa####welcome.net':80
- 'pi####ecomplete.net':80
- 'ci#####tecomplete.net':80
- 'ex###tproud.net':80
- 'be####eproud.net':80
- 'ex####around.net':80
- 'be####earound.net':80
- 'pe####welcome.net':80
- 'ma####ewelcome.net':80
- 'ex####complete.net':80
- 'be####ecomplete.net':80
- 'ei####kitchen.net':80
- 'en####hkitchen.net':80
- 'ei####without.net':80
- 'en####hwithout.net':80
- 'ex####welcome.net':80
- 'be####ewelcome.net':80
- 'ei####probable.net':80
- 'en####hprobable.net':80
- 'su###nproud.net':80
- 'fo####nproud.net':80
- 'su####around.net':80
- 'fo####naround.net':80
- 'wh####rwelcome.net':80
- 'ri####elcome.net':80
- 'su####complete.net':80
- 'fo####ncomplete.net':80
- 'pe###nproud.net':80
- 'ma####eproud.net':80
- 'pe####around.net':80
- 'ma####earound.net':80
- 'su####welcome.net':80
- 'fo####nwelcome.net':80
- 'pe####complete.net':80
- 'ma####ecomplete.net':80
- http://fi###eproud.net/index.php
- http://th###hproud.net/index.php
- http://fi####around.net/index.php
- http://th####around.net/index.php
- http://pi####ewelcome.net/index.php
- http://ci#####tewelcome.net/index.php
- http://fi####complete.net/index.php
- http://th####complete.net/index.php
- http://wh####rproud.net/index.php
- http://ri###proud.net/index.php
- http://wh####raround.net/index.php
- http://ri###around.net/index.php
- http://fi####welcome.net/index.php
- http://th####welcome.net/index.php
- http://wh####rcomplete.net/index.php
- http://ri####omplete.net/index.php
- http://ch####enproud.net/index.php
- http://fa###yproud.net/index.php
- http://ch####enaround.net/index.php
- http://fa####around.net/index.php
- http://ei####welcome.net/index.php
- http://en####hwelcome.net/index.php
- http://ch#####ncomplete.net/index.php
- http://fa####complete.net/index.php
- http://pi####eproud.net/index.php
- http://ci####tteproud.net/index.php
- http://pi####earound.net/index.php
- http://ci####ttearound.net/index.php
- http://ch####enwelcome.net/index.php
- http://fa####welcome.net/index.php
- http://pi####ecomplete.net/index.php
- http://ci#####tecomplete.net/index.php
- http://ex###tproud.net/index.php
- http://be####eproud.net/index.php
- http://ex####around.net/index.php
- http://be####earound.net/index.php
- http://pe####welcome.net/index.php
- http://ma####ewelcome.net/index.php
- http://ex####complete.net/index.php
- http://be####ecomplete.net/index.php
- http://ei####kitchen.net/index.php
- http://en####hkitchen.net/index.php
- http://ei####without.net/index.php
- http://en####hwithout.net/index.php
- http://ex####welcome.net/index.php
- http://be####ewelcome.net/index.php
- http://ei####probable.net/index.php
- http://en####hprobable.net/index.php
- http://su###nproud.net/index.php
- http://fo####nproud.net/index.php
- http://su####around.net/index.php
- http://fo####naround.net/index.php
- http://wh####rwelcome.net/index.php
- http://ri####elcome.net/index.php
- http://su####complete.net/index.php
- http://fo####ncomplete.net/index.php
- http://pe###nproud.net/index.php
- http://ma####eproud.net/index.php
- http://pe####around.net/index.php
- http://ma####earound.net/index.php
- http://su####welcome.net/index.php
- http://fo####nwelcome.net/index.php
- http://pe####complete.net/index.php
- http://ma####ecomplete.net/index.php
- DNS ASK th###hproud.net
- DNS ASK fi####complete.net
- DNS ASK th####around.net
- DNS ASK fi###eproud.net
- DNS ASK ci#####tewelcome.net
- DNS ASK pi####earound.net
- DNS ASK th####complete.net
- DNS ASK pi####ewelcome.net
- DNS ASK ri###proud.net
- DNS ASK wh####rcomplete.net
- DNS ASK ri###around.net
- DNS ASK wh####rproud.net
- DNS ASK th####welcome.net
- DNS ASK fi####around.net
- DNS ASK ri####omplete.net
- DNS ASK fi####welcome.net
- DNS ASK fa###yproud.net
- DNS ASK ch#####ncomplete.net
- DNS ASK fa####around.net
- DNS ASK ch####enproud.net
- DNS ASK en####hwelcome.net
- DNS ASK ei####around.net
- DNS ASK fa####complete.net
- DNS ASK ei####welcome.net
- DNS ASK ci####tteproud.net
- DNS ASK pi####ecomplete.net
- DNS ASK ci####ttearound.net
- DNS ASK pi####eproud.net
- DNS ASK fa####welcome.net
- DNS ASK ch####enaround.net
- DNS ASK ci#####tecomplete.net
- DNS ASK ch####enwelcome.net
- DNS ASK wh####raround.net
- DNS ASK ex###tproud.net
- DNS ASK be####eproud.net
- DNS ASK ex####around.net
- DNS ASK be####earound.net
- DNS ASK pe####welcome.net
- DNS ASK ma####ewelcome.net
- DNS ASK ex####complete.net
- DNS ASK be####ecomplete.net
- DNS ASK ei####kitchen.net
- DNS ASK en####hkitchen.net
- DNS ASK ei####without.net
- DNS ASK en####hwithout.net
- DNS ASK ex####welcome.net
- DNS ASK be####ewelcome.net
- DNS ASK ei####probable.net
- DNS ASK en####hprobable.net
- DNS ASK su###nproud.net
- DNS ASK fo####nproud.net
- DNS ASK su####around.net
- DNS ASK fo####naround.net
- DNS ASK wh####rwelcome.net
- DNS ASK ri####elcome.net
- DNS ASK su####complete.net
- DNS ASK fo####ncomplete.net
- DNS ASK pe###nproud.net
- DNS ASK ma####eproud.net
- DNS ASK pe####around.net
- DNS ASK ma####earound.net
- DNS ASK su####welcome.net
- DNS ASK fo####nwelcome.net
- DNS ASK pe####complete.net
- DNS ASK ma####ecomplete.net
- ClassName: 'Shell_TrayWnd' WindowName: ''