Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Tracking Update Builder' = 'C:\bjgufohavwd\uhodwuyfly.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Search Policy Play Machine Error] 'ImagePath' = 'C:\bjgufohavwd\uhodwuyfly.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Search Policy Play Machine Error] 'Start' = '00000002'
- 'C:\bjgufohavwd\dhketqqurxzo.exe' "c:\bjgufohavwd\uhodwuyfly.exe"
- 'C:\bjgufohavwd\uhodwuyfly.exe'
- 'C:\bjgufohavwd\vlu632px6wqsyzakrafe.exe'
- C:\bjgufohavwd\uhodwuyfly.exe
- C:\bjgufohavwd\dhketqqurxzo.exe
- C:\bjgufohavwd\cvvd2tmcarc
- %WINDIR%\bjgufohavwd\cztrmf6ldy
- C:\bjgufohavwd\cztrmf6ldy
- C:\bjgufohavwd\vlu632px6wqsyzakrafe.exe
- C:\bjgufohavwd\dhketqqurxzo.exe
- C:\bjgufohavwd\uhodwuyfly.exe
- C:\bjgufohavwd\vlu632px6wqsyzakrafe.exe
- %WINDIR%\bjgufohavwd\cztrmf6ldy
- 'ma####alheart.net':80
- 'se####lperfect.net':80
- 'se####lheart.net':80
- 'sw###battle.net':80
- 'pr####lybattle.net':80
- 'se####lbattle.net':80
- 'ma####albattle.net':80
- 'ma####almayor.net':80
- 'ma####alperfect.net':80
- 'se####lmayor.net':80
- 'le###battle.net':80
- 'sw###heart.net':80
- 'fi####battle.net':80
- 'fi###hmayor.net':80
- 'le###mayor.net':80
- 'sw###mayor.net':80
- 'pr####lymayor.net':80
- 'pr####lyperfect.net':80
- 'pr####lyheart.net':80
- 'sw####erfect.net':80
- 'fr####nderstand.net':80
- 'ge####manbutter.net':80
- 'al####ybutter.net':80
- 'al####ybehind.net':80
- 'al####ybroad.net':80
- 'ge####manbehind.net':80
- 'me###rbroad.net':80
- 'fo####behind.net':80
- 'fo###wbroad.net':80
- 'fo#####nderstand.net':80
- 'me#####nderstand.net':80
- 'fr###behind.net':80
- 'ex#####ncebehind.net':80
- 'ex####encebroad.net':80
- 'ex######ceunderstand.net':80
- 'fr###broad.net':80
- 'al#####understand.net':80
- 'ge####manbroad.net':80
- 'ge#####anunderstand.net':80
- 'fr###butter.net':80
- 'ex#####ncebutter.net':80
- 'le####erfect.net':80
- 'mo###rmayor.net':80
- 'si####battle.net':80
- 'si###emayor.net':80
- 'si####perfect.net':80
- 'mo####perfect.net':80
- 'mo####inperfect.net':80
- 'po####leperfect.net':80
- 'po####leheart.net':80
- 'mo####battle.net':80
- 'mo####inheart.net':80
- 'la####erfect.net':80
- 'se###amayor.net':80
- 'se####perfect.net':80
- 'se###aheart.net':80
- 'la###heart.net':80
- 'si###eheart.net':80
- 'mo###rheart.net':80
- 'la###battle.net':80
- 'la###mayor.net':80
- 'se####battle.net':80
- 'mo####inmayor.net':80
- 'su####tperfect.net':80
- 'wi###rmayor.net':80
- 'su####theart.net':80
- 'wi####battle.net':80
- 'wi###rheart.net':80
- 'le###heart.net':80
- 'fi####perfect.net':80
- 'fi###hheart.net':80
- 'su####tmayor.net':80
- 'su####tbattle.net':80
- 'pe####sheart.net':80
- 'wi###wheart.net':80
- 'po####lebattle.net':80
- 'po####lemayor.net':80
- 'mo####inbattle.net':80
- 'wi###wmayor.net':80
- 'pe####sbattle.net':80
- 'pe####smayor.net':80
- 'pe####sperfect.net':80
- 'wi####perfect.net':80
- http://ma####alheart.net/index.php
- http://se####lperfect.net/index.php
- http://se####lheart.net/index.php
- http://sw###battle.net/index.php
- http://pr####lybattle.net/index.php
- http://se####lbattle.net/index.php
- http://ma####albattle.net/index.php
- http://ma####almayor.net/index.php
- http://ma####alperfect.net/index.php
- http://se####lmayor.net/index.php
- http://le###battle.net/index.php
- http://sw###heart.net/index.php
- http://fi####battle.net/index.php
- http://fi###hmayor.net/index.php
- http://le###mayor.net/index.php
- http://sw###mayor.net/index.php
- http://pr####lymayor.net/index.php
- http://pr####lyperfect.net/index.php
- http://pr####lyheart.net/index.php
- http://sw####erfect.net/index.php
- http://fr####nderstand.net/index.php
- http://ge####manbutter.net/index.php
- http://al####ybutter.net/index.php
- http://al####ybehind.net/index.php
- http://al####ybroad.net/index.php
- http://ge####manbehind.net/index.php
- http://me###rbroad.net/index.php
- http://fo####behind.net/index.php
- http://fo###wbroad.net/index.php
- http://fo#####nderstand.net/index.php
- http://me#####nderstand.net/index.php
- http://fr###behind.net/index.php
- http://ex#####ncebehind.net/index.php
- http://ex####encebroad.net/index.php
- http://ex######ceunderstand.net/index.php
- http://fr###broad.net/index.php
- http://al#####understand.net/index.php
- http://ge####manbroad.net/index.php
- http://ge#####anunderstand.net/index.php
- http://fr###butter.net/index.php
- http://ex#####ncebutter.net/index.php
- http://le####erfect.net/index.php
- http://mo###rmayor.net/index.php
- http://si####battle.net/index.php
- http://si###emayor.net/index.php
- http://si####perfect.net/index.php
- http://mo####perfect.net/index.php
- http://mo####inperfect.net/index.php
- http://po####leperfect.net/index.php
- http://po####leheart.net/index.php
- http://mo####battle.net/index.php
- http://mo####inheart.net/index.php
- http://la####erfect.net/index.php
- http://se###amayor.net/index.php
- http://se####perfect.net/index.php
- http://se###aheart.net/index.php
- http://la###heart.net/index.php
- http://si###eheart.net/index.php
- http://mo###rheart.net/index.php
- http://la###battle.net/index.php
- http://la###mayor.net/index.php
- http://se####battle.net/index.php
- http://mo####inmayor.net/index.php
- http://su####tperfect.net/index.php
- http://wi###rmayor.net/index.php
- http://su####theart.net/index.php
- http://wi####battle.net/index.php
- http://wi###rheart.net/index.php
- http://le###heart.net/index.php
- http://fi####perfect.net/index.php
- http://fi###hheart.net/index.php
- http://su####tmayor.net/index.php
- http://su####tbattle.net/index.php
- http://pe####sheart.net/index.php
- http://wi###wheart.net/index.php
- http://po####lebattle.net/index.php
- http://po####lemayor.net/index.php
- http://mo####inbattle.net/index.php
- http://wi###wmayor.net/index.php
- http://pe####sbattle.net/index.php
- http://pe####smayor.net/index.php
- http://pe####sperfect.net/index.php
- http://wi####perfect.net/index.php
- DNS ASK ma####alheart.net
- DNS ASK se####lperfect.net
- DNS ASK se####lheart.net
- DNS ASK sw###battle.net
- DNS ASK pr####lybattle.net
- DNS ASK se####lbattle.net
- DNS ASK ma####albattle.net
- DNS ASK ma####almayor.net
- DNS ASK ma####alperfect.net
- DNS ASK se####lmayor.net
- DNS ASK le###battle.net
- DNS ASK sw###heart.net
- DNS ASK fi####battle.net
- DNS ASK fi###hmayor.net
- DNS ASK le###mayor.net
- DNS ASK sw###mayor.net
- DNS ASK pr####lymayor.net
- DNS ASK pr####lyperfect.net
- DNS ASK pr####lyheart.net
- DNS ASK sw####erfect.net
- DNS ASK fr####nderstand.net
- DNS ASK ge####manbutter.net
- DNS ASK al####ybutter.net
- DNS ASK al####ybehind.net
- DNS ASK al####ybroad.net
- DNS ASK ge####manbehind.net
- DNS ASK me###rbroad.net
- DNS ASK fo####behind.net
- DNS ASK fo###wbroad.net
- DNS ASK fo#####nderstand.net
- DNS ASK me#####nderstand.net
- DNS ASK fr###behind.net
- DNS ASK ex#####ncebehind.net
- DNS ASK ex####encebroad.net
- DNS ASK ex######ceunderstand.net
- DNS ASK fr###broad.net
- DNS ASK al#####understand.net
- DNS ASK ge####manbroad.net
- DNS ASK ge#####anunderstand.net
- DNS ASK fr###butter.net
- DNS ASK ex#####ncebutter.net
- DNS ASK le####erfect.net
- DNS ASK mo###rmayor.net
- DNS ASK si####battle.net
- DNS ASK si###emayor.net
- DNS ASK si####perfect.net
- DNS ASK mo####perfect.net
- DNS ASK mo####inperfect.net
- DNS ASK po####leperfect.net
- DNS ASK po####leheart.net
- DNS ASK mo####battle.net
- DNS ASK mo####inheart.net
- DNS ASK la####erfect.net
- DNS ASK se###amayor.net
- DNS ASK se####perfect.net
- DNS ASK se###aheart.net
- DNS ASK la###heart.net
- DNS ASK si###eheart.net
- DNS ASK mo###rheart.net
- DNS ASK la###battle.net
- DNS ASK la###mayor.net
- DNS ASK se####battle.net
- DNS ASK mo####inmayor.net
- DNS ASK su####tperfect.net
- DNS ASK wi###rmayor.net
- DNS ASK su####theart.net
- DNS ASK wi####battle.net
- DNS ASK wi###rheart.net
- DNS ASK le###heart.net
- DNS ASK fi####perfect.net
- DNS ASK fi###hheart.net
- DNS ASK su####tmayor.net
- DNS ASK su####tbattle.net
- DNS ASK pe####sheart.net
- DNS ASK wi###wheart.net
- DNS ASK po####lebattle.net
- DNS ASK po####lemayor.net
- DNS ASK mo####inbattle.net
- DNS ASK wi###wmayor.net
- DNS ASK pe####sbattle.net
- DNS ASK pe####smayor.net
- DNS ASK pe####sperfect.net
- DNS ASK wi####perfect.net
- ClassName: 'Shell_TrayWnd' WindowName: ''