Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Port Manager Extender SNMP Protection' = 'C:\hbdwwpm8xm\t9p3xsbklxqrg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Human Copy System Remote Debugger] 'ImagePath' = 'C:\hbdwwpm8xm\t9p3xsbklxqrg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Human Copy System Remote Debugger] 'Start' = '00000002'
- 'C:\hbdwwpm8xm\oakdld5bqzi.exe' "c:\hbdwwpm8xm\t9p3xsbklxqrg.exe"
- 'C:\hbdwwpm8xm\t9p3xsbklxqrg.exe'
- 'C:\hbdwwpm8xm\jkmjjpm2r1jbufxkwwpk4.exe'
- C:\hbdwwpm8xm\t9p3xsbklxqrg.exe
- C:\hbdwwpm8xm\oakdld5bqzi.exe
- C:\hbdwwpm8xm\ngeoz2fusxu6
- %WINDIR%\hbdwwpm8xm\rheytszp
- C:\hbdwwpm8xm\rheytszp
- C:\hbdwwpm8xm\jkmjjpm2r1jbufxkwwpk4.exe
- C:\hbdwwpm8xm\oakdld5bqzi.exe
- C:\hbdwwpm8xm\t9p3xsbklxqrg.exe
- C:\hbdwwpm8xm\jkmjjpm2r1jbufxkwwpk4.exe
- %WINDIR%\hbdwwpm8xm\rheytszp
- 'ca#####nekristina.net':80
- 'an#####tephilomena.net':80
- 'ca#####nakristina.net':80
- 'ca#####nagallagher.net':80
- 'ca#####negallagher.net':80
- 'an#####tegallagher.net':80
- 'ma#####negallagher.net':80
- 'ma#####nefrederick.net':80
- 'ma#####nephilomena.net':80
- 'an#####tefrederick.net':80
- 'ki#####eegallagher.net':80
- 'ma#####iankristina.net':80
- 'ma#####iangallagher.net':80
- 'ma#####ianfrederick.net':80
- 'ki#####eefrederick.net':80
- 'ca#####nafrederick.net':80
- 'ca#####nefrederick.net':80
- 'ca#####nephilomena.net':80
- 'ki#####eekristina.net':80
- 'ca#####naphilomena.net':80
- 'an#####tekristina.net':80
- 'ki#####yngallagher.net':80
- 'gl#####legallagher.net':80
- 'gl#####lefrederick.net':80
- 'gl#####lephilomena.net':80
- 'ki#####ynfrederick.net':80
- 'ge#####vephilomena.net':80
- 'je#####nefrederick.net':80
- 'je#####nephilomena.net':80
- 'ki#####ynkristina.net':80
- 'gl#####lekristina.net':80
- 'ch#####tefrederick.net':80
- 'st#####iefrederick.net':80
- 'st#####iephilomena.net':80
- 'ma#####nekristina.net':80
- 'ch#####tephilomena.net':80
- 'st#####iekristina.net':80
- 'ki#####ynphilomena.net':80
- 'ch#####tekristina.net':80
- 'ch#####tegallagher.net':80
- 'st#####iegallagher.net':80
- 'ki#####eephilomena.net':80
- 'gl######ecristiansen.net':80
- 'ki#####ynmurgatroyd.net':80
- 'ki######ncristiansen.net':80
- 'ki#####ynmatthewson.net':80
- 'gl#####lematthewson.net':80
- 'je#####nematthewson.net':80
- 'ge#####vematthewson.net':80
- 'ge######eoutterridge.net':80
- 'gl#####lemurgatroyd.net':80
- 'je######eoutterridge.net':80
- 'st#####iematthewson.net':80
- 'ch######ecristiansen.net':80
- 'ch#####tematthewson.net':80
- 'ch######eoutterridge.net':80
- 'st######eoutterridge.net':80
- 'ki######noutterridge.net':80
- 'gl######eoutterridge.net':80
- 'st#####iemurgatroyd.net':80
- 'st######ecristiansen.net':80
- 'ch#####temurgatroyd.net':80
- 'je######ecristiansen.net':80
- 'kr#####herfrederick.net':80
- 'ca#####rafrederick.net':80
- 'ca#####raphilomena.net':80
- 'ma#####kemurgatroyd.net':80
- 'kr#####herphilomena.net':80
- 'ca#####rakristina.net':80
- 'ma#####ianphilomena.net':80
- 'kr#####herkristina.net':80
- 'kr#####hergallagher.net':80
- 'ca#####ragallagher.net':80
- 'ze######houtterridge.net':80
- 'ma######eoutterridge.net':80
- 'ge#####vemurgatroyd.net':80
- 'ge######ecristiansen.net':80
- 'je#####nemurgatroyd.net':80
- 'ma######ecristiansen.net':80
- 'ze#####ahmurgatroyd.net':80
- 'ze######hcristiansen.net':80
- 'ze#####ahmatthewson.net':80
- 'ma#####kematthewson.net':80
- http://ca#####nekristina.net/index.php
- http://an#####tephilomena.net/index.php
- http://ca#####nakristina.net/index.php
- http://ca#####nagallagher.net/index.php
- http://ca#####negallagher.net/index.php
- http://an#####tegallagher.net/index.php
- http://ma#####negallagher.net/index.php
- http://ma#####nefrederick.net/index.php
- http://ma#####nephilomena.net/index.php
- http://an#####tefrederick.net/index.php
- http://ki#####eegallagher.net/index.php
- http://ma#####iankristina.net/index.php
- http://ma#####iangallagher.net/index.php
- http://ma#####ianfrederick.net/index.php
- http://ki#####eefrederick.net/index.php
- http://ca#####nafrederick.net/index.php
- http://ca#####nefrederick.net/index.php
- http://ca#####nephilomena.net/index.php
- http://ki#####eekristina.net/index.php
- http://ca#####naphilomena.net/index.php
- http://an#####tekristina.net/index.php
- http://ki#####yngallagher.net/index.php
- http://gl#####legallagher.net/index.php
- http://gl#####lefrederick.net/index.php
- http://gl#####lephilomena.net/index.php
- http://ki#####ynfrederick.net/index.php
- http://ge#####vephilomena.net/index.php
- http://je#####nefrederick.net/index.php
- http://je#####nephilomena.net/index.php
- http://ki#####ynkristina.net/index.php
- http://gl#####lekristina.net/index.php
- http://ch#####tefrederick.net/index.php
- http://st#####iefrederick.net/index.php
- http://st#####iephilomena.net/index.php
- http://ma#####nekristina.net/index.php
- http://ch#####tephilomena.net/index.php
- http://st#####iekristina.net/index.php
- http://ki#####ynphilomena.net/index.php
- http://ch#####tekristina.net/index.php
- http://ch#####tegallagher.net/index.php
- http://st#####iegallagher.net/index.php
- http://ki#####eephilomena.net/index.php
- http://gl######ecristiansen.net/index.php
- http://ki#####ynmurgatroyd.net/index.php
- http://ki######ncristiansen.net/index.php
- http://ki#####ynmatthewson.net/index.php
- http://gl#####lematthewson.net/index.php
- http://je#####nematthewson.net/index.php
- http://ge#####vematthewson.net/index.php
- http://ge######eoutterridge.net/index.php
- http://gl#####lemurgatroyd.net/index.php
- http://je######eoutterridge.net/index.php
- http://st#####iematthewson.net/index.php
- http://ch######ecristiansen.net/index.php
- http://ch#####tematthewson.net/index.php
- http://ch######eoutterridge.net/index.php
- http://st######eoutterridge.net/index.php
- http://ki######noutterridge.net/index.php
- http://gl######eoutterridge.net/index.php
- http://st#####iemurgatroyd.net/index.php
- http://st######ecristiansen.net/index.php
- http://ch#####temurgatroyd.net/index.php
- http://je######ecristiansen.net/index.php
- http://kr#####herfrederick.net/index.php
- http://ca#####rafrederick.net/index.php
- http://ca#####raphilomena.net/index.php
- http://ma#####kemurgatroyd.net/index.php
- http://kr#####herphilomena.net/index.php
- http://ca#####rakristina.net/index.php
- http://ma#####ianphilomena.net/index.php
- http://kr#####herkristina.net/index.php
- http://kr#####hergallagher.net/index.php
- http://ca#####ragallagher.net/index.php
- http://ze######houtterridge.net/index.php
- http://ma######eoutterridge.net/index.php
- http://ge#####vemurgatroyd.net/index.php
- http://ge######ecristiansen.net/index.php
- http://je#####nemurgatroyd.net/index.php
- http://ma######ecristiansen.net/index.php
- http://ze#####ahmurgatroyd.net/index.php
- http://ze######hcristiansen.net/index.php
- http://ze#####ahmatthewson.net/index.php
- http://ma#####kematthewson.net/index.php
- DNS ASK an#####tephilomena.net
- DNS ASK ma#####nephilomena.net
- DNS ASK ca#####nekristina.net
- DNS ASK ca#####negallagher.net
- DNS ASK ca#####nakristina.net
- DNS ASK ma#####negallagher.net
- DNS ASK an#####tekristina.net
- DNS ASK an#####tegallagher.net
- DNS ASK an#####tefrederick.net
- DNS ASK ma#####nefrederick.net
- DNS ASK ca#####nagallagher.net
- DNS ASK ki#####eegallagher.net
- DNS ASK ma#####iankristina.net
- DNS ASK ma#####iangallagher.net
- DNS ASK ma#####ianfrederick.net
- DNS ASK ki#####eefrederick.net
- DNS ASK ca#####nafrederick.net
- DNS ASK ca#####nefrederick.net
- DNS ASK ca#####nephilomena.net
- DNS ASK ki#####eekristina.net
- DNS ASK ca#####naphilomena.net
- DNS ASK gl#####legallagher.net
- DNS ASK ki#####ynkristina.net
- DNS ASK ki#####yngallagher.net
- DNS ASK ki#####ynfrederick.net
- DNS ASK gl#####lefrederick.net
- DNS ASK je#####nefrederick.net
- DNS ASK ge#####vefrederick.net
- DNS ASK ge#####vephilomena.net
- DNS ASK gl#####lekristina.net
- DNS ASK je#####nephilomena.net
- DNS ASK gl#####lephilomena.net
- DNS ASK ch#####tefrederick.net
- DNS ASK st#####iefrederick.net
- DNS ASK st#####iephilomena.net
- DNS ASK ma#####nekristina.net
- DNS ASK ch#####tephilomena.net
- DNS ASK st#####iekristina.net
- DNS ASK ki#####ynphilomena.net
- DNS ASK ch#####tekristina.net
- DNS ASK ch#####tegallagher.net
- DNS ASK st#####iegallagher.net
- DNS ASK ki#####ynmurgatroyd.net
- DNS ASK gl#####lemurgatroyd.net
- DNS ASK gl######ecristiansen.net
- DNS ASK gl#####lematthewson.net
- DNS ASK ki######ncristiansen.net
- DNS ASK ge#####vematthewson.net
- DNS ASK je######ecristiansen.net
- DNS ASK je#####nematthewson.net
- DNS ASK je######eoutterridge.net
- DNS ASK ge######eoutterridge.net
- DNS ASK ki#####ynmatthewson.net
- DNS ASK st#####iematthewson.net
- DNS ASK ch######ecristiansen.net
- DNS ASK ch#####tematthewson.net
- DNS ASK ch######eoutterridge.net
- DNS ASK st######eoutterridge.net
- DNS ASK ki######noutterridge.net
- DNS ASK gl######eoutterridge.net
- DNS ASK st#####iemurgatroyd.net
- DNS ASK st######ecristiansen.net
- DNS ASK ch#####temurgatroyd.net
- DNS ASK ca#####rafrederick.net
- DNS ASK kr#####hergallagher.net
- DNS ASK kr#####herfrederick.net
- DNS ASK kr#####herphilomena.net
- DNS ASK ca#####raphilomena.net
- DNS ASK ma#####ianphilomena.net
- DNS ASK ki#####eephilomena.net
- DNS ASK ca#####rakristina.net
- DNS ASK ca#####ragallagher.net
- DNS ASK kr#####herkristina.net
- DNS ASK ma#####kemurgatroyd.net
- DNS ASK ze######houtterridge.net
- DNS ASK ma######eoutterridge.net
- DNS ASK ge#####vemurgatroyd.net
- DNS ASK ge######ecristiansen.net
- DNS ASK je#####nemurgatroyd.net
- DNS ASK ma######ecristiansen.net
- DNS ASK ze#####ahmurgatroyd.net
- DNS ASK ze######hcristiansen.net
- DNS ASK ze#####ahmatthewson.net
- DNS ASK ma#####kematthewson.net