Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Routing Search Provider Hardware PC Time' = 'C:\febiklye5i3g\swzlzkcnywjp.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Controls Task Layer Log Tablet Tools Protection] 'ImagePath' = 'C:\febiklye5i3g\swzlzkcnywjp.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Controls Task Layer Log Tablet Tools Protection] 'Start' = '00000002'
- 'C:\febiklye5i3g\kjidfcguq.exe' "c:\febiklye5i3g\swzlzkcnywjp.exe"
- 'C:\febiklye5i3g\swzlzkcnywjp.exe'
- 'C:\febiklye5i3g\fins3vqd31t4zc4pscxzs.exe'
- C:\febiklye5i3g\swzlzkcnywjp.exe
- C:\febiklye5i3g\kjidfcguq.exe
- C:\febiklye5i3g\axp3any
- %WINDIR%\febiklye5i3g\hihppnycpnb
- C:\febiklye5i3g\hihppnycpnb
- C:\febiklye5i3g\fins3vqd31t4zc4pscxzs.exe
- C:\febiklye5i3g\kjidfcguq.exe
- C:\febiklye5i3g\swzlzkcnywjp.exe
- C:\febiklye5i3g\fins3vqd31t4zc4pscxzs.exe
- %WINDIR%\febiklye5i3g\hihppnycpnb
- 'co#####usvictorson.net':80
- 'ma#####nejosephson.net':80
- 'co#####usjosephson.net':80
- 'ma#####nevictorson.net':80
- 'co#####usseabrooke.net':80
- 'ma#####nenathanson.net':80
- 'co#####usnathanson.net':80
- 'ra#####leseabrooke.net':80
- 'co#####ervictorson.net':80
- 'ra#####lejosephson.net':80
- 'co#####erjosephson.net':80
- 'ra#####levictorson.net':80
- 'co#####erseabrooke.net':80
- 'ra#####lenathanson.net':80
- 'co#####ernathanson.net':80
- 'ma#####neseabrooke.net':80
- 'ka#####nevictorson.net':80
- 'co#####nejosephson.net':80
- 'ka#####nejosephson.net':80
- 'co#####nevictorson.net':80
- 'ka#####neseabrooke.net':80
- 'co#####nenathanson.net':80
- 'ka#####nenathanson.net':80
- 'sh#####neseabrooke.net':80
- 'ch#####asvictorson.net':80
- 'sh#####nejosephson.net':80
- 'ch#####asjosephson.net':80
- 'sh#####nevictorson.net':80
- 'ch#####asseabrooke.net':80
- 'sh#####nenathanson.net':80
- 'ch#####asnathanson.net':80
- 'qu#####lahuddleson.net':80
- 'ma#####nehuddleson.net':80
- 'qu#####labotwright.net':80
- 'ma#####neellsworth.net':80
- 'qu#####laalbertson.net':80
- 'ma#####nealbertson.net':80
- 'qu#####laellsworth.net':80
- 'ma#####nebotwright.net':80
- 'ra#####fehuddleson.net':80
- 'ro#####lthuddleson.net':80
- 'ra#####febotwright.net':80
- 'ro#####ltellsworth.net':80
- 'ra#####fealbertson.net':80
- 'ro#####ltalbertson.net':80
- 'ra#####feellsworth.net':80
- 'jo#####nejosephson.net':80
- 'se#####ervictorson.net':80
- 'tr#####anvictorson.net':80
- 'se#####erjosephson.net':80
- 'tr#####annathanson.net':80
- 'se#####erseabrooke.net':80
- 'tr#####anseabrooke.net':80
- 'se#####ernathanson.net':80
- 'tr#####anjosephson.net':80
- 'se#####navictorson.net':80
- 'jo#####nevictorson.net':80
- 'se#####najosephson.net':80
- 'jo#####nenathanson.net':80
- 'se#####naseabrooke.net':80
- 'jo#####neseabrooke.net':80
- 'se#####nanathanson.net':80
- http://co#####usvictorson.net/index.php
- http://ma#####nejosephson.net/index.php
- http://co#####usjosephson.net/index.php
- http://ma#####nevictorson.net/index.php
- http://co#####usseabrooke.net/index.php
- http://ma#####nenathanson.net/index.php
- http://co#####usnathanson.net/index.php
- http://ra#####leseabrooke.net/index.php
- http://co#####ervictorson.net/index.php
- http://ra#####lejosephson.net/index.php
- http://co#####erjosephson.net/index.php
- http://ra#####levictorson.net/index.php
- http://co#####erseabrooke.net/index.php
- http://ra#####lenathanson.net/index.php
- http://co#####ernathanson.net/index.php
- http://ma#####neseabrooke.net/index.php
- http://ka#####nevictorson.net/index.php
- http://co#####nejosephson.net/index.php
- http://ka#####nejosephson.net/index.php
- http://co#####nevictorson.net/index.php
- http://ka#####neseabrooke.net/index.php
- http://co#####nenathanson.net/index.php
- http://ka#####nenathanson.net/index.php
- http://sh#####neseabrooke.net/index.php
- http://ch#####asvictorson.net/index.php
- http://sh#####nejosephson.net/index.php
- http://ch#####asjosephson.net/index.php
- http://sh#####nevictorson.net/index.php
- http://ch#####asseabrooke.net/index.php
- http://sh#####nenathanson.net/index.php
- http://ch#####asnathanson.net/index.php
- http://qu#####lahuddleson.net/index.php
- http://ma#####nehuddleson.net/index.php
- http://qu#####labotwright.net/index.php
- http://ma#####neellsworth.net/index.php
- http://qu#####laalbertson.net/index.php
- http://ma#####nealbertson.net/index.php
- http://qu#####laellsworth.net/index.php
- http://ma#####nebotwright.net/index.php
- http://ra#####fehuddleson.net/index.php
- http://ro#####lthuddleson.net/index.php
- http://ra#####febotwright.net/index.php
- http://ro#####ltellsworth.net/index.php
- http://ra#####fealbertson.net/index.php
- http://ro#####ltalbertson.net/index.php
- http://ra#####feellsworth.net/index.php
- http://jo#####nejosephson.net/index.php
- http://se#####ervictorson.net/index.php
- http://tr#####anvictorson.net/index.php
- http://se#####erjosephson.net/index.php
- http://tr#####annathanson.net/index.php
- http://se#####erseabrooke.net/index.php
- http://tr#####anseabrooke.net/index.php
- http://se#####ernathanson.net/index.php
- http://tr#####anjosephson.net/index.php
- http://se#####navictorson.net/index.php
- http://jo#####nevictorson.net/index.php
- http://se#####najosephson.net/index.php
- http://jo#####nenathanson.net/index.php
- http://se#####naseabrooke.net/index.php
- http://jo#####neseabrooke.net/index.php
- http://se#####nanathanson.net/index.php
- DNS ASK co#####usvictorson.net
- DNS ASK ma#####nejosephson.net
- DNS ASK co#####usjosephson.net
- DNS ASK ma#####nevictorson.net
- DNS ASK co#####usseabrooke.net
- DNS ASK ma#####nenathanson.net
- DNS ASK co#####usnathanson.net
- DNS ASK ra#####leseabrooke.net
- DNS ASK co#####ervictorson.net
- DNS ASK ra#####lejosephson.net
- DNS ASK co#####erjosephson.net
- DNS ASK ra#####levictorson.net
- DNS ASK co#####erseabrooke.net
- DNS ASK ra#####lenathanson.net
- DNS ASK co#####ernathanson.net
- DNS ASK ma#####neseabrooke.net
- DNS ASK ka#####nevictorson.net
- DNS ASK co#####nejosephson.net
- DNS ASK ka#####nejosephson.net
- DNS ASK co#####nevictorson.net
- DNS ASK ka#####neseabrooke.net
- DNS ASK co#####nenathanson.net
- DNS ASK ka#####nenathanson.net
- DNS ASK sh#####neseabrooke.net
- DNS ASK ch#####asvictorson.net
- DNS ASK sh#####nejosephson.net
- DNS ASK ch#####asjosephson.net
- DNS ASK sh#####nevictorson.net
- DNS ASK ch#####asseabrooke.net
- DNS ASK sh#####nenathanson.net
- DNS ASK ch#####asnathanson.net
- DNS ASK qu#####lahuddleson.net
- DNS ASK ma#####nehuddleson.net
- DNS ASK qu#####labotwright.net
- DNS ASK ma#####neellsworth.net
- DNS ASK qu#####laalbertson.net
- DNS ASK ma#####nealbertson.net
- DNS ASK qu#####laellsworth.net
- DNS ASK ma#####nebotwright.net
- DNS ASK ra#####fehuddleson.net
- DNS ASK ro#####lthuddleson.net
- DNS ASK ra#####febotwright.net
- DNS ASK ro#####ltellsworth.net
- DNS ASK ra#####fealbertson.net
- DNS ASK ro#####ltalbertson.net
- DNS ASK ra#####feellsworth.net
- DNS ASK jo#####nejosephson.net
- DNS ASK se#####ervictorson.net
- DNS ASK tr#####anvictorson.net
- DNS ASK se#####erjosephson.net
- DNS ASK tr#####annathanson.net
- DNS ASK se#####erseabrooke.net
- DNS ASK tr#####anseabrooke.net
- DNS ASK se#####ernathanson.net
- DNS ASK tr#####anjosephson.net
- DNS ASK se#####navictorson.net
- DNS ASK jo#####nevictorson.net
- DNS ASK se#####najosephson.net
- DNS ASK jo#####nenathanson.net
- DNS ASK se#####naseabrooke.net
- DNS ASK jo#####neseabrooke.net
- DNS ASK se#####nanathanson.net