Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Cache UserMode CNG Problem' = 'C:\jpsfmqubstpf\kmrkfymbxkhf.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\TPM Publication VC Now Ordering Office] 'ImagePath' = 'C:\jpsfmqubstpf\kmrkfymbxkhf.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\TPM Publication VC Now Ordering Office] 'Start' = '00000002'
- 'C:\jpsfmqubstpf\ljnsefh.exe' "c:\jpsfmqubstpf\kmrkfymbxkhf.exe"
- 'C:\jpsfmqubstpf\kmrkfymbxkhf.exe'
- 'C:\jpsfmqubstpf\rytk2r76arwjrrwhw.exe'
- C:\jpsfmqubstpf\kmrkfymbxkhf.exe
- C:\jpsfmqubstpf\ljnsefh.exe
- C:\jpsfmqubstpf\rytk2r76arwjrrwhw.exe
- %WINDIR%\jpsfmqubstpf\eysknmna4xvo
- C:\jpsfmqubstpf\eysknmna4xvo
- C:\jpsfmqubstpf\ljnsefh.exe
- C:\jpsfmqubstpf\kmrkfymbxkhf.exe
- C:\jpsfmqubstpf\rytk2r76arwjrrwhw.exe
- %WINDIR%\jpsfmqubstpf\eysknmna4xvo
- 'si####receive.net':80
- 'mo####receive.net':80
- 'si####believe.net':80
- 'mo####believe.net':80
- 'si####quarter.net':80
- 'po####lebranch.net':80
- 'mo####inbelieve.net':80
- 'mo####quarter.net':80
- 'mo####inbranch.net':80
- 'la####elieve.net':80
- 'se####receive.net':80
- 'la###branch.net':80
- 'se####believe.net':80
- 'la####eceive.net':80
- 'si####branch.net':80
- 'mo####branch.net':80
- 'se####quarter.net':80
- 'la####uarter.net':80
- 'pe####squarter.net':80
- 'wi####quarter.net':80
- 'pe####sreceive.net':80
- 'wi####receive.net':80
- 'su####tbranch.net':80
- 'su####tquarter.net':80
- 'fi####branch.net':80
- 'su####tbelieve.net':80
- 'su####treceive.net':80
- 'po####lereceive.net':80
- 'mo####inquarter.net':80
- 'po####lebelieve.net':80
- 'mo####inreceive.net':80
- 'po####lequarter.net':80
- 'pe####sbelieve.net':80
- 'wi####believe.net':80
- 'pe####sbranch.net':80
- 'wi####branch.net':80
- 'fi###hclear.net':80
- 'le###clear.net':80
- 'wi###rnorth.net':80
- 'su####tnorth.net':80
- 'fi####general.net':80
- 'le####nclude.net':80
- 'fi###hnorth.net':80
- 'le####eneral.net':80
- 'fi####include.net':80
- 'pe####snorth.net':80
- 'wi###wnorth.net':80
- 'pe####sinclude.net':80
- 'wi####include.net':80
- 'wi###rclear.net':80
- 'su####tgeneral.net':80
- 'su####tinclude.net':80
- 'su####tclear.net':80
- 'wi####general.net':80
- 'se####lgeneral.net':80
- 'ma####algeneral.net':80
- 'se####lclear.net':80
- 'ma####alclear.net':80
- 'se####linclude.net':80
- 'ma####alnorth.net':80
- 'se####branch.net':80
- 'ma####alinclude.net':80
- 'se####lnorth.net':80
- 'pr####lyclear.net':80
- 'sw####eneral.net':80
- 'le###north.net':80
- 'sw###clear.net':80
- 'pr####lygeneral.net':80
- 'sw###north.net':80
- 'pr####lynorth.net':80
- 'sw####nclude.net':80
- 'pr####lyinclude.net':80
- http://si####receive.net/index.php
- http://mo####receive.net/index.php
- http://si####believe.net/index.php
- http://mo####believe.net/index.php
- http://si####quarter.net/index.php
- http://po####lebranch.net/index.php
- http://mo####inbelieve.net/index.php
- http://mo####quarter.net/index.php
- http://mo####inbranch.net/index.php
- http://la####elieve.net/index.php
- http://se####receive.net/index.php
- http://la###branch.net/index.php
- http://se####believe.net/index.php
- http://la####eceive.net/index.php
- http://si####branch.net/index.php
- http://mo####branch.net/index.php
- http://se####quarter.net/index.php
- http://la####uarter.net/index.php
- http://pe####squarter.net/index.php
- http://wi####quarter.net/index.php
- http://pe####sreceive.net/index.php
- http://wi####receive.net/index.php
- http://su####tbranch.net/index.php
- http://su####tquarter.net/index.php
- http://fi####branch.net/index.php
- http://su####tbelieve.net/index.php
- http://su####treceive.net/index.php
- http://po####lereceive.net/index.php
- http://mo####inquarter.net/index.php
- http://po####lebelieve.net/index.php
- http://mo####inreceive.net/index.php
- http://po####lequarter.net/index.php
- http://pe####sbelieve.net/index.php
- http://wi####believe.net/index.php
- http://pe####sbranch.net/index.php
- http://wi####branch.net/index.php
- http://fi###hclear.net/index.php
- http://le###clear.net/index.php
- http://wi###rnorth.net/index.php
- http://su####tnorth.net/index.php
- http://fi####general.net/index.php
- http://le####nclude.net/index.php
- http://fi###hnorth.net/index.php
- http://le####eneral.net/index.php
- http://fi####include.net/index.php
- http://pe####snorth.net/index.php
- http://wi###wnorth.net/index.php
- http://pe####sinclude.net/index.php
- http://wi####include.net/index.php
- http://wi###rclear.net/index.php
- http://su####tgeneral.net/index.php
- http://su####tinclude.net/index.php
- http://su####tclear.net/index.php
- http://wi####general.net/index.php
- http://se####lgeneral.net/index.php
- http://ma####algeneral.net/index.php
- http://se####lclear.net/index.php
- http://ma####alclear.net/index.php
- http://se####linclude.net/index.php
- http://ma####alnorth.net/index.php
- http://se####branch.net/index.php
- http://ma####alinclude.net/index.php
- http://se####lnorth.net/index.php
- http://pr####lyclear.net/index.php
- http://sw####eneral.net/index.php
- http://le###north.net/index.php
- http://sw###clear.net/index.php
- http://pr####lygeneral.net/index.php
- http://sw###north.net/index.php
- http://pr####lynorth.net/index.php
- http://sw####nclude.net/index.php
- http://pr####lyinclude.net/index.php
- DNS ASK si####receive.net
- DNS ASK mo####receive.net
- DNS ASK si####believe.net
- DNS ASK mo####believe.net
- DNS ASK si####quarter.net
- DNS ASK po####lebranch.net
- DNS ASK mo####inbelieve.net
- DNS ASK mo####quarter.net
- DNS ASK mo####inbranch.net
- DNS ASK la####elieve.net
- DNS ASK se####receive.net
- DNS ASK la###branch.net
- DNS ASK se####believe.net
- DNS ASK la####eceive.net
- DNS ASK si####branch.net
- DNS ASK mo####branch.net
- DNS ASK se####quarter.net
- DNS ASK la####uarter.net
- DNS ASK pe####squarter.net
- DNS ASK wi####quarter.net
- DNS ASK pe####sreceive.net
- DNS ASK wi####receive.net
- DNS ASK su####tbranch.net
- DNS ASK su####tquarter.net
- DNS ASK fi####branch.net
- DNS ASK su####tbelieve.net
- DNS ASK su####treceive.net
- DNS ASK po####lereceive.net
- DNS ASK mo####inquarter.net
- DNS ASK po####lebelieve.net
- DNS ASK mo####inreceive.net
- DNS ASK po####lequarter.net
- DNS ASK pe####sbelieve.net
- DNS ASK wi####believe.net
- DNS ASK pe####sbranch.net
- DNS ASK wi####branch.net
- DNS ASK fi###hclear.net
- DNS ASK le###clear.net
- DNS ASK wi###rnorth.net
- DNS ASK su####tnorth.net
- DNS ASK fi####general.net
- DNS ASK le####nclude.net
- DNS ASK fi###hnorth.net
- DNS ASK le####eneral.net
- DNS ASK fi####include.net
- DNS ASK pe####snorth.net
- DNS ASK wi###wnorth.net
- DNS ASK pe####sinclude.net
- DNS ASK wi####include.net
- DNS ASK wi###rclear.net
- DNS ASK su####tgeneral.net
- DNS ASK su####tinclude.net
- DNS ASK su####tclear.net
- DNS ASK wi####general.net
- DNS ASK se####lgeneral.net
- DNS ASK ma####algeneral.net
- DNS ASK se####lclear.net
- DNS ASK ma####alclear.net
- DNS ASK se####linclude.net
- DNS ASK ma####alnorth.net
- DNS ASK se####branch.net
- DNS ASK ma####alinclude.net
- DNS ASK se####lnorth.net
- DNS ASK pr####lyclear.net
- DNS ASK sw####eneral.net
- DNS ASK le###north.net
- DNS ASK sw###clear.net
- DNS ASK pr####lygeneral.net
- DNS ASK sw###north.net
- DNS ASK pr####lynorth.net
- DNS ASK sw####nclude.net
- DNS ASK pr####lyinclude.net
- ClassName: 'Shell_TrayWnd' WindowName: ''