Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%TEMP%\A70n1d104.EXE'
- '%TEMP%\A70n1d104.exe'
- '<SYSTEM32>\wscript.exe' A113zWWLj.vbs
- [Software\Far2\Plugins\FTP\Hosts]
- [Software\Far\Plugins\FTP\Hosts]
- %TEMP%\COPY_5530.exeezx.269.olio
- %TEMP%\COPY_5530.exeezx.27.olio
- %TEMP%\COPY_5530.exeezx.267.olio
- %TEMP%\COPY_5530.exeezx.268.olio
- %TEMP%\COPY_5530.exeezx.272.olio
- %TEMP%\COPY_5530.exeezx.273.olio
- %TEMP%\COPY_5530.exeezx.270.olio
- %TEMP%\COPY_5530.exeezx.271.olio
- %TEMP%\COPY_5530.exeezx.266.olio
- %TEMP%\COPY_5530.exeezx.260.olio
- %TEMP%\COPY_5530.exeezx.261.olio
- %TEMP%\COPY_5530.exeezx.259.olio
- %TEMP%\COPY_5530.exeezx.26.olio
- %TEMP%\COPY_5530.exeezx.264.olio
- %TEMP%\COPY_5530.exeezx.265.olio
- %TEMP%\COPY_5530.exeezx.262.olio
- %TEMP%\COPY_5530.exeezx.263.olio
- %TEMP%\COPY_5530.exeezx.274.olio
- %TEMP%\COPY_5530.exeezx.3.olio
- %TEMP%\COPY_5530.exeezx.30.olio
- %TEMP%\COPY_5530.exeezx.283.olio
- %TEMP%\COPY_5530.exeezx.29.olio
- %TEMP%\COPY_5530.exeezx.33.olio
- %TEMP%\COPY_5530.exeezx.34.olio
- %TEMP%\COPY_5530.exeezx.31.olio
- %TEMP%\COPY_5530.exeezx.32.olio
- %TEMP%\COPY_5530.exeezx.282.olio
- %TEMP%\COPY_5530.exeezx.277.olio
- %TEMP%\COPY_5530.exeezx.278.olio
- %TEMP%\COPY_5530.exeezx.275.olio
- %TEMP%\COPY_5530.exeezx.276.olio
- %TEMP%\COPY_5530.exeezx.280.olio
- %TEMP%\COPY_5530.exeezx.281.olio
- %TEMP%\COPY_5530.exeezx.279.olio
- %TEMP%\COPY_5530.exeezx.28.olio
- %TEMP%\COPY_5530.exeezx.258.olio
- %TEMP%\COPY_5530.exeezx.236.olio
- %TEMP%\COPY_5530.exeezx.237.olio
- %TEMP%\COPY_5530.exeezx.234.olio
- %TEMP%\COPY_5530.exeezx.235.olio
- %TEMP%\COPY_5530.exeezx.24.olio
- %TEMP%\COPY_5530.exeezx.240.olio
- %TEMP%\COPY_5530.exeezx.238.olio
- %TEMP%\COPY_5530.exeezx.239.olio
- %TEMP%\COPY_5530.exeezx.233.olio
- %TEMP%\COPY_5530.exeezx.228.olio
- %TEMP%\COPY_5530.exeezx.229.olio
- %TEMP%\COPY_5530.exeezx.226.olio
- %TEMP%\COPY_5530.exeezx.227.olio
- %TEMP%\COPY_5530.exeezx.231.olio
- %TEMP%\COPY_5530.exeezx.232.olio
- %TEMP%\COPY_5530.exeezx.23.olio
- %TEMP%\COPY_5530.exeezx.230.olio
- %TEMP%\COPY_5530.exeezx.241.olio
- %TEMP%\COPY_5530.exeezx.252.olio
- %TEMP%\COPY_5530.exeezx.253.olio
- %TEMP%\COPY_5530.exeezx.250.olio
- %TEMP%\COPY_5530.exeezx.251.olio
- %TEMP%\COPY_5530.exeezx.256.olio
- %TEMP%\COPY_5530.exeezx.257.olio
- %TEMP%\COPY_5530.exeezx.254.olio
- %TEMP%\COPY_5530.exeezx.255.olio
- %TEMP%\COPY_5530.exeezx.25.olio
- %TEMP%\COPY_5530.exeezx.244.olio
- %TEMP%\COPY_5530.exeezx.245.olio
- %TEMP%\COPY_5530.exeezx.242.olio
- %TEMP%\COPY_5530.exeezx.243.olio
- %TEMP%\COPY_5530.exeezx.248.olio
- %TEMP%\COPY_5530.exeezx.249.olio
- %TEMP%\COPY_5530.exeezx.246.olio
- %TEMP%\COPY_5530.exeezx.247.olio
- %TEMP%\COPY_5530.exeezx.35.olio
- %TEMP%\COPY_5530.exeezx.79.olio
- %TEMP%\COPY_5530.exeezx.8.olio
- %TEMP%\COPY_5530.exeezx.77.olio
- %TEMP%\COPY_5530.exeezx.78.olio
- %TEMP%\COPY_5530.exeezx.82.olio
- %TEMP%\COPY_5530.exeezx.83.olio
- %TEMP%\COPY_5530.exeezx.80.olio
- %TEMP%\COPY_5530.exeezx.81.olio
- %TEMP%\COPY_5530.exeezx.76.olio
- %TEMP%\COPY_5530.exeezx.70.olio
- %TEMP%\COPY_5530.exeezx.71.olio
- %TEMP%\COPY_5530.exeezx.69.olio
- %TEMP%\COPY_5530.exeezx.7.olio
- %TEMP%\COPY_5530.exeezx.74.olio
- %TEMP%\COPY_5530.exeezx.75.olio
- %TEMP%\COPY_5530.exeezx.72.olio
- %TEMP%\COPY_5530.exeezx.73.olio
- %TEMP%\COPY_5530.exeezx.84.olio
- %TEMP%\COPY_5530.exeezx.95.olio
- %TEMP%\COPY_5530.exeezx.96.olio
- %TEMP%\COPY_5530.exeezx.93.olio
- %TEMP%\COPY_5530.exeezx.94.olio
- %TEMP%\COPY_5530.exeezx.99.olio
- %TEMP%\486270.bat
- %TEMP%\COPY_5530.exeezx.97.olio
- %TEMP%\COPY_5530.exeezx.98.olio
- %TEMP%\COPY_5530.exeezx.92.olio
- %TEMP%\COPY_5530.exeezx.87.olio
- %TEMP%\COPY_5530.exeezx.88.olio
- %TEMP%\COPY_5530.exeezx.85.olio
- %TEMP%\COPY_5530.exeezx.86.olio
- %TEMP%\COPY_5530.exeezx.90.olio
- %TEMP%\COPY_5530.exeezx.91.olio
- %TEMP%\COPY_5530.exeezx.89.olio
- %TEMP%\COPY_5530.exeezx.9.olio
- %TEMP%\COPY_5530.exeezx.68.olio
- %TEMP%\COPY_5530.exeezx.46.olio
- %TEMP%\COPY_5530.exeezx.47.olio
- %TEMP%\COPY_5530.exeezx.44.olio
- %TEMP%\COPY_5530.exeezx.45.olio
- %TEMP%\COPY_5530.exeezx.5.olio
- %TEMP%\COPY_5530.exeezx.50.olio
- %TEMP%\COPY_5530.exeezx.48.olio
- %TEMP%\COPY_5530.exeezx.49.olio
- %TEMP%\COPY_5530.exeezx.43.olio
- %TEMP%\COPY_5530.exeezx.38.olio
- %TEMP%\COPY_5530.exeezx.39.olio
- %TEMP%\COPY_5530.exeezx.36.olio
- %TEMP%\COPY_5530.exeezx.37.olio
- %TEMP%\COPY_5530.exeezx.41.olio
- %TEMP%\COPY_5530.exeezx.42.olio
- %TEMP%\COPY_5530.exeezx.4.olio
- %TEMP%\COPY_5530.exeezx.40.olio
- %TEMP%\COPY_5530.exeezx.51.olio
- %TEMP%\COPY_5530.exeezx.62.olio
- %TEMP%\COPY_5530.exeezx.63.olio
- %TEMP%\COPY_5530.exeezx.60.olio
- %TEMP%\COPY_5530.exeezx.61.olio
- %TEMP%\COPY_5530.exeezx.66.olio
- %TEMP%\COPY_5530.exeezx.67.olio
- %TEMP%\COPY_5530.exeezx.64.olio
- %TEMP%\COPY_5530.exeezx.65.olio
- %TEMP%\COPY_5530.exeezx.6.olio
- %TEMP%\COPY_5530.exeezx.54.olio
- %TEMP%\COPY_5530.exeezx.55.olio
- %TEMP%\COPY_5530.exeezx.52.olio
- %TEMP%\COPY_5530.exeezx.53.olio
- %TEMP%\COPY_5530.exeezx.58.olio
- %TEMP%\COPY_5530.exeezx.59.olio
- %TEMP%\COPY_5530.exeezx.56.olio
- %TEMP%\COPY_5530.exeezx.57.olio
- %TEMP%\COPY_5530.exeezx.225.olio
- %TEMP%\COPY_5530.exeezx.139.olio
- %TEMP%\COPY_5530.exeezx.14.olio
- %TEMP%\COPY_5530.exeezx.137.olio
- %TEMP%\COPY_5530.exeezx.138.olio
- %TEMP%\COPY_5530.exeezx.142.olio
- %TEMP%\COPY_5530.exeezx.143.olio
- %TEMP%\COPY_5530.exeezx.140.olio
- %TEMP%\COPY_5530.exeezx.141.olio
- %TEMP%\COPY_5530.exeezx.136.olio
- %TEMP%\COPY_5530.exeezx.130.olio
- %TEMP%\COPY_5530.exeezx.131.olio
- %TEMP%\COPY_5530.exeezx.129.olio
- %TEMP%\COPY_5530.exeezx.13.olio
- %TEMP%\COPY_5530.exeezx.134.olio
- %TEMP%\COPY_5530.exeezx.135.olio
- %TEMP%\COPY_5530.exeezx.132.olio
- %TEMP%\COPY_5530.exeezx.133.olio
- %TEMP%\COPY_5530.exeezx.144.olio
- %TEMP%\COPY_5530.exeezx.155.olio
- %TEMP%\COPY_5530.exeezx.156.olio
- %TEMP%\COPY_5530.exeezx.153.olio
- %TEMP%\COPY_5530.exeezx.154.olio
- %TEMP%\COPY_5530.exeezx.159.olio
- %TEMP%\COPY_5530.exeezx.16.olio
- %TEMP%\COPY_5530.exeezx.157.olio
- %TEMP%\COPY_5530.exeezx.158.olio
- %TEMP%\COPY_5530.exeezx.152.olio
- %TEMP%\COPY_5530.exeezx.147.olio
- %TEMP%\COPY_5530.exeezx.148.olio
- %TEMP%\COPY_5530.exeezx.145.olio
- %TEMP%\COPY_5530.exeezx.146.olio
- %TEMP%\COPY_5530.exeezx.150.olio
- %TEMP%\COPY_5530.exeezx.151.olio
- %TEMP%\COPY_5530.exeezx.149.olio
- %TEMP%\COPY_5530.exeezx.15.olio
- %TEMP%\COPY_5530.exeezx.128.olio
- %TEMP%\COPY_5530.exeezx.106.olio
- %TEMP%\COPY_5530.exeezx.107.olio
- %TEMP%\COPY_5530.exeezx.104.olio
- %TEMP%\COPY_5530.exeezx.105.olio
- %TEMP%\COPY_5530.exeezx.11.olio
- %TEMP%\COPY_5530.exeezx.110.olio
- %TEMP%\COPY_5530.exeezx.108.olio
- %TEMP%\COPY_5530.exeezx.109.olio
- %TEMP%\COPY_5530.exeezx.103.olio
- %TEMP%\A113zWWLj.vbs
- %TEMP%\COPY_5530.exeezx.1.olio
- %TEMP%\7dk10Wv7.bat
- %TEMP%\A0gGT1IJ9.bat
- %TEMP%\COPY_5530.exeezx.101.olio
- %TEMP%\COPY_5530.exeezx.102.olio
- %TEMP%\COPY_5530.exeezx.10.olio
- %TEMP%\COPY_5530.exeezx.100.olio
- %TEMP%\COPY_5530.exeezx.111.olio
- %TEMP%\COPY_5530.exeezx.122.olio
- %TEMP%\COPY_5530.exeezx.123.olio
- %TEMP%\COPY_5530.exeezx.120.olio
- %TEMP%\COPY_5530.exeezx.121.olio
- %TEMP%\COPY_5530.exeezx.126.olio
- %TEMP%\COPY_5530.exeezx.127.olio
- %TEMP%\COPY_5530.exeezx.124.olio
- %TEMP%\COPY_5530.exeezx.125.olio
- %TEMP%\COPY_5530.exeezx.12.olio
- %TEMP%\COPY_5530.exeezx.114.olio
- %TEMP%\COPY_5530.exeezx.115.olio
- %TEMP%\COPY_5530.exeezx.112.olio
- %TEMP%\COPY_5530.exeezx.113.olio
- %TEMP%\COPY_5530.exeezx.118.olio
- %TEMP%\COPY_5530.exeezx.119.olio
- %TEMP%\COPY_5530.exeezx.116.olio
- %TEMP%\COPY_5530.exeezx.117.olio
- %TEMP%\COPY_5530.exeezx.160.olio
- %TEMP%\COPY_5530.exeezx.203.olio
- %TEMP%\COPY_5530.exeezx.204.olio
- %TEMP%\COPY_5530.exeezx.201.olio
- %TEMP%\COPY_5530.exeezx.202.olio
- %TEMP%\COPY_5530.exeezx.207.olio
- %TEMP%\COPY_5530.exeezx.208.olio
- %TEMP%\COPY_5530.exeezx.205.olio
- %TEMP%\COPY_5530.exeezx.206.olio
- %TEMP%\COPY_5530.exeezx.200.olio
- %TEMP%\COPY_5530.exeezx.196.olio
- %TEMP%\COPY_5530.exeezx.197.olio
- %TEMP%\COPY_5530.exeezx.194.olio
- %TEMP%\COPY_5530.exeezx.195.olio
- %TEMP%\COPY_5530.exeezx.2.olio
- %TEMP%\COPY_5530.exeezx.20.olio
- %TEMP%\COPY_5530.exeezx.198.olio
- %TEMP%\COPY_5530.exeezx.199.olio
- %TEMP%\COPY_5530.exeezx.209.olio
- %TEMP%\COPY_5530.exeezx.22.olio
- %TEMP%\COPY_5530.exeezx.220.olio
- %TEMP%\COPY_5530.exeezx.218.olio
- %TEMP%\COPY_5530.exeezx.219.olio
- %TEMP%\COPY_5530.exeezx.223.olio
- %TEMP%\COPY_5530.exeezx.224.olio
- %TEMP%\COPY_5530.exeezx.221.olio
- %TEMP%\COPY_5530.exeezx.222.olio
- %TEMP%\COPY_5530.exeezx.217.olio
- %TEMP%\COPY_5530.exeezx.211.olio
- %TEMP%\COPY_5530.exeezx.212.olio
- %TEMP%\COPY_5530.exeezx.21.olio
- %TEMP%\COPY_5530.exeezx.210.olio
- %TEMP%\COPY_5530.exeezx.215.olio
- %TEMP%\COPY_5530.exeezx.216.olio
- %TEMP%\COPY_5530.exeezx.213.olio
- %TEMP%\COPY_5530.exeezx.214.olio
- %TEMP%\COPY_5530.exeezx.193.olio
- %TEMP%\COPY_5530.exeezx.171.olio
- %TEMP%\COPY_5530.exeezx.172.olio
- %TEMP%\COPY_5530.exeezx.17.olio
- %TEMP%\COPY_5530.exeezx.170.olio
- %TEMP%\COPY_5530.exeezx.175.olio
- %TEMP%\COPY_5530.exeezx.176.olio
- %TEMP%\COPY_5530.exeezx.173.olio
- %TEMP%\COPY_5530.exeezx.174.olio
- %TEMP%\COPY_5530.exeezx.169.olio
- %TEMP%\COPY_5530.exeezx.163.olio
- %TEMP%\COPY_5530.exeezx.164.olio
- %TEMP%\COPY_5530.exeezx.161.olio
- %TEMP%\COPY_5530.exeezx.162.olio
- %TEMP%\COPY_5530.exeezx.167.olio
- %TEMP%\COPY_5530.exeezx.168.olio
- %TEMP%\COPY_5530.exeezx.165.olio
- %TEMP%\COPY_5530.exeezx.166.olio
- %TEMP%\COPY_5530.exeezx.177.olio
- %TEMP%\COPY_5530.exeezx.188.olio
- %TEMP%\COPY_5530.exeezx.189.olio
- %TEMP%\COPY_5530.exeezx.186.olio
- %TEMP%\COPY_5530.exeezx.187.olio
- %TEMP%\COPY_5530.exeezx.191.olio
- %TEMP%\COPY_5530.exeezx.192.olio
- %TEMP%\COPY_5530.exeezx.19.olio
- %TEMP%\COPY_5530.exeezx.190.olio
- %TEMP%\COPY_5530.exeezx.185.olio
- %TEMP%\COPY_5530.exeezx.18.olio
- %TEMP%\COPY_5530.exeezx.180.olio
- %TEMP%\COPY_5530.exeezx.178.olio
- %TEMP%\COPY_5530.exeezx.179.olio
- %TEMP%\COPY_5530.exeezx.183.olio
- %TEMP%\COPY_5530.exeezx.184.olio
- %TEMP%\COPY_5530.exeezx.181.olio
- %TEMP%\COPY_5530.exeezx.182.olio
- %TEMP%\A70n1d104.exe
- from %TEMP%\COPY_5530.exeezx.1.olio to %TEMP%\A70n1d104.exe
- DNS ASK dn#.##ftncsi.com
- DNS ASK aw####t.net76.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'EDIT' WindowName: ''