Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Redirector Firewall Interactive Print Telephony' = 'C:\hdocodnztziqc\eytakdqj.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Internet Isolation NGEN Task DLL] 'ImagePath' = 'C:\hdocodnztziqc\eytakdqj.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Internet Isolation NGEN Task DLL] 'Start' = '00000002'
- 'C:\hdocodnztziqc\yqikpoxccvg.exe' "c:\hdocodnztziqc\eytakdqj.exe"
- 'C:\hdocodnztziqc\eytakdqj.exe'
- 'C:\hdocodnztziqc\rpbcp3kk1tloysjiniv.exe'
- C:\hdocodnztziqc\eytakdqj.exe
- C:\hdocodnztziqc\yqikpoxccvg.exe
- C:\hdocodnztziqc\rpbcp3kk1tloysjiniv.exe
- %WINDIR%\hdocodnztziqc\jezznn
- C:\hdocodnztziqc\jezznn
- C:\hdocodnztziqc\yqikpoxccvg.exe
- C:\hdocodnztziqc\eytakdqj.exe
- C:\hdocodnztziqc\rpbcp3kk1tloysjiniv.exe
- %WINDIR%\hdocodnztziqc\jezznn
- 'mo####inreceive.net':80
- 'po####lebelieve.net':80
- 'mo####inquarter.net':80
- 'po####lereceive.net':80
- 'mo####inbranch.net':80
- 'mo####quarter.net':80
- 'mo####inbelieve.net':80
- 'po####lebranch.net':80
- 'pe####sreceive.net':80
- 'wi####believe.net':80
- 'pe####squarter.net':80
- 'wi####receive.net':80
- 'pe####sbranch.net':80
- 'po####lequarter.net':80
- 'pe####sbelieve.net':80
- 'wi####branch.net':80
- 'si####quarter.net':80
- 'la####elieve.net':80
- 'se####believe.net':80
- 'la####eceive.net':80
- 'se####receive.net':80
- 'ma####alnorth.net':80
- 'se####lnorth.net':80
- 'la###branch.net':80
- 'se####branch.net':80
- 'mo####believe.net':80
- 'si####believe.net':80
- 'mo####receive.net':80
- 'si####receive.net':80
- 'la####uarter.net':80
- 'se####quarter.net':80
- 'mo####branch.net':80
- 'si####branch.net':80
- http://mo####inreceive.net/index.php
- http://po####lebelieve.net/index.php
- http://mo####inquarter.net/index.php
- http://po####lereceive.net/index.php
- http://mo####inbranch.net/index.php
- http://mo####quarter.net/index.php
- http://mo####inbelieve.net/index.php
- http://po####lebranch.net/index.php
- http://pe####sreceive.net/index.php
- http://wi####believe.net/index.php
- http://pe####squarter.net/index.php
- http://wi####receive.net/index.php
- http://pe####sbranch.net/index.php
- http://po####lequarter.net/index.php
- http://pe####sbelieve.net/index.php
- http://wi####branch.net/index.php
- http://si####quarter.net/index.php
- http://la####elieve.net/index.php
- http://se####believe.net/index.php
- http://la####eceive.net/index.php
- http://se####receive.net/index.php
- http://ma####alnorth.net/index.php
- http://se####lnorth.net/index.php
- http://la###branch.net/index.php
- http://se####branch.net/index.php
- http://mo####believe.net/index.php
- http://si####believe.net/index.php
- http://mo####receive.net/index.php
- http://si####receive.net/index.php
- http://la####uarter.net/index.php
- http://se####quarter.net/index.php
- http://mo####branch.net/index.php
- http://si####branch.net/index.php
- DNS ASK mo####inreceive.net
- DNS ASK po####lebelieve.net
- DNS ASK mo####inquarter.net
- DNS ASK po####lereceive.net
- DNS ASK mo####inbranch.net
- DNS ASK mo####quarter.net
- DNS ASK mo####inbelieve.net
- DNS ASK po####lebranch.net
- DNS ASK po####lequarter.net
- DNS ASK wi####receive.net
- DNS ASK pe####sreceive.net
- DNS ASK wi####quarter.net
- DNS ASK pe####squarter.net
- DNS ASK wi####branch.net
- DNS ASK pe####sbranch.net
- DNS ASK wi####believe.net
- DNS ASK pe####sbelieve.net
- DNS ASK la####elieve.net
- DNS ASK se####believe.net
- DNS ASK la####eceive.net
- DNS ASK se####receive.net
- DNS ASK ma####alnorth.net
- DNS ASK se####lnorth.net
- DNS ASK la###branch.net
- DNS ASK se####branch.net
- DNS ASK se####quarter.net
- DNS ASK si####receive.net
- DNS ASK mo####believe.net
- DNS ASK si####quarter.net
- DNS ASK mo####receive.net
- DNS ASK si####branch.net
- DNS ASK la####uarter.net
- DNS ASK si####believe.net
- DNS ASK mo####branch.net
- ClassName: 'Shell_TrayWnd' WindowName: ''