Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Power KtmRm Copy Publication Config IKE' = '%APPDATA%\zgzibgxkitca\jbvrsnqpyp.exe'
- '%APPDATA%\zgzibgxkitca\scxrckzgnaop.exe' "%APPDATA%\zgzibgxkitca\jbvrsnqpyp.exe"
- '%APPDATA%\zgzibgxkitca\jbvrsnqpyp.exe'
- %APPDATA%\zgzibgxkitca\jbvrsnqpyp.uyyfq
- %APPDATA%\zgzibgxkitca\scxrckzgnaop.exe
- %APPDATA%\zgzibgxkitca\jbvrsnqpyp.exe
- %APPDATA%\zgzibgxkitca\scxrckzgnaop.exe
- %APPDATA%\zgzibgxkitca\jbvrsnqpyp.exe
- 'st###being.net':80
- 'mi###beyond.net':80
- 'st###beyond.net':80
- 'mi###being.net':80
- 'st###bottom.net':80
- 'mi####orever.net':80
- 'st####orever.net':80
- 'ev####gbottom.net':80
- 'bu####ngbeing.net':80
- 'ev####gbeyond.net':80
- 'bu####ngbeyond.net':80
- 'ev####gbeing.net':80
- 'bu####ngbottom.net':80
- 'ev####gforever.net':80
- 'bu####ngforever.net':80
- 'fe###wbeing.net':80
- 'fe####beyond.net':80
- 'pr####bottom.net':80
- 'do###ebeing.net':80
- 'br####beyond.net':80
- 'fe####bottom.net':80
- 'fe####forever.net':80
- 'do####bottom.net':80
- 'pr####beyond.net':80
- 'do####beyond.net':80
- 'mi###bottom.net':80
- 'do###rbeing.net':80
- 'pr####forever.net':80
- 'do####forever.net':80
- 'pr###ybeing.net':80
- 'ou####ebottom.net':80
- 'fa###yabove.net':80
- 'ch####enabove.net':80
- 'fa###yuntil.net':80
- 'ch#####nshoulder.net':80
- 'fa####finger.net':80
- 'ch####enfinger.net':80
- 'fa####shoulder.net':80
- 'ch####enuntil.net':80
- 'ci####tteabove.net':80
- 'pi####eabove.net':80
- 'ci####tteuntil.net':80
- 'pi####eshoulder.net':80
- 'ci####ttefinger.net':80
- 'pi####efinger.net':80
- 'ci#####teshoulder.net':80
- 'mo####ntbeing.net':80
- 'ou####ebeyond.net':80
- 'mo####ntbeyond.net':80
- 'ou####ebeing.net':80
- 'mo####ntbottom.net':80
- 'ou####eforever.net':80
- 'mo####ntforever.net':80
- 'en####hfinger.net':80
- 'ei###rabove.net':80
- 'en####huntil.net':80
- 'ei###runtil.net':80
- 'en####habove.net':80
- 'ei####finger.net':80
- 'en####hshoulder.net':80
- 'ei####shoulder.net':80
- http://st###being.net/forum/search.php?em################################
- http://mi###beyond.net/forum/search.php?em################################
- http://st###beyond.net/forum/search.php?em################################
- http://mi###being.net/forum/search.php?em################################
- http://st###bottom.net/forum/search.php?em################################
- http://mi####orever.net/forum/search.php?em################################
- http://st####orever.net/forum/search.php?em################################
- http://ev####gbottom.net/forum/search.php?em################################
- http://bu####ngbeing.net/forum/search.php?em################################
- http://ev####gbeyond.net/forum/search.php?em################################
- http://bu####ngbeyond.net/forum/search.php?em################################
- http://ev####gbeing.net/forum/search.php?em################################
- http://bu####ngbottom.net/forum/search.php?em################################
- http://ev####gforever.net/forum/search.php?em################################
- http://bu####ngforever.net/forum/search.php?em################################
- http://fe###wbeing.net/forum/search.php?em################################
- http://fe####beyond.net/forum/search.php?em################################
- http://pr####bottom.net/forum/search.php?em################################
- http://do###ebeing.net/forum/search.php?em################################
- http://br####beyond.net/forum/search.php?em################################
- http://fe####bottom.net/forum/search.php?em################################
- http://fe####forever.net/forum/search.php?em################################
- http://do####bottom.net/forum/search.php?em################################
- http://pr####beyond.net/forum/search.php?em################################
- http://do####beyond.net/forum/search.php?em################################
- http://mi###bottom.net/forum/search.php?em################################
- http://do###rbeing.net/forum/search.php?em################################
- http://pr####forever.net/forum/search.php?em################################
- http://do####forever.net/forum/search.php?em################################
- http://pr###ybeing.net/forum/search.php?em################################
- http://ou####ebottom.net/forum/search.php?em################################
- http://fa###yabove.net/forum/search.php?em################################
- http://ch####enabove.net/forum/search.php?em################################
- http://fa###yuntil.net/forum/search.php?em################################
- http://ch#####nshoulder.net/forum/search.php?em################################
- http://fa####finger.net/forum/search.php?em################################
- http://ch####enfinger.net/forum/search.php?em################################
- http://fa####shoulder.net/forum/search.php?em################################
- http://ch####enuntil.net/forum/search.php?em################################
- http://ci####tteabove.net/forum/search.php?em################################
- http://pi####eabove.net/forum/search.php?em################################
- http://ci####tteuntil.net/forum/search.php?em################################
- http://pi####eshoulder.net/forum/search.php?em################################
- http://ci####ttefinger.net/forum/search.php?em################################
- http://pi####efinger.net/forum/search.php?em################################
- http://ci#####teshoulder.net/forum/search.php?em################################
- http://mo####ntbeing.net/forum/search.php?em################################
- http://ou####ebeyond.net/forum/search.php?em################################
- http://mo####ntbeyond.net/forum/search.php?em################################
- http://ou####ebeing.net/forum/search.php?em################################
- http://mo####ntbottom.net/forum/search.php?em################################
- http://ou####eforever.net/forum/search.php?em################################
- http://mo####ntforever.net/forum/search.php?em################################
- http://en####hfinger.net/forum/search.php?em################################
- http://ei###rabove.net/forum/search.php?em################################
- http://en####huntil.net/forum/search.php?em################################
- http://ei###runtil.net/forum/search.php?em################################
- http://en####habove.net/forum/search.php?em################################
- http://ei####finger.net/forum/search.php?em################################
- http://en####hshoulder.net/forum/search.php?em################################
- http://ei####shoulder.net/forum/search.php?em################################
- DNS ASK st###being.net
- DNS ASK mi###beyond.net
- DNS ASK st###beyond.net
- DNS ASK mi###being.net
- DNS ASK st###bottom.net
- DNS ASK mi####orever.net
- DNS ASK st####orever.net
- DNS ASK ev####gbottom.net
- DNS ASK bu####ngbeing.net
- DNS ASK ev####gbeyond.net
- DNS ASK bu####ngbeyond.net
- DNS ASK ev####gbeing.net
- DNS ASK bu####ngbottom.net
- DNS ASK ev####gforever.net
- DNS ASK bu####ngforever.net
- DNS ASK fe###wbeing.net
- DNS ASK fe####beyond.net
- DNS ASK pr####bottom.net
- DNS ASK do###ebeing.net
- DNS ASK br####beyond.net
- DNS ASK fe####bottom.net
- DNS ASK fe####forever.net
- DNS ASK do####bottom.net
- DNS ASK pr####beyond.net
- DNS ASK do####beyond.net
- DNS ASK mi###bottom.net
- DNS ASK do###rbeing.net
- DNS ASK pr####forever.net
- DNS ASK do####forever.net
- DNS ASK pr###ybeing.net
- DNS ASK ou####ebottom.net
- DNS ASK fa###yabove.net
- DNS ASK ch####enabove.net
- DNS ASK fa###yuntil.net
- DNS ASK ch#####nshoulder.net
- DNS ASK fa####finger.net
- DNS ASK ch####enfinger.net
- DNS ASK fa####shoulder.net
- DNS ASK ch####enuntil.net
- DNS ASK ci####tteabove.net
- DNS ASK pi####eabove.net
- DNS ASK ci####tteuntil.net
- DNS ASK pi####eshoulder.net
- DNS ASK ci####ttefinger.net
- DNS ASK pi####efinger.net
- DNS ASK ci#####teshoulder.net
- DNS ASK mo####ntbeing.net
- DNS ASK ou####ebeyond.net
- DNS ASK mo####ntbeyond.net
- DNS ASK ou####ebeing.net
- DNS ASK mo####ntbottom.net
- DNS ASK ou####eforever.net
- DNS ASK mo####ntforever.net
- DNS ASK en####hfinger.net
- DNS ASK ei###rabove.net
- DNS ASK en####huntil.net
- DNS ASK ei###runtil.net
- DNS ASK en####habove.net
- DNS ASK ei####finger.net
- DNS ASK en####hshoulder.net
- DNS ASK ei####shoulder.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''