Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Provider Portable Experience' = '<SYSTEM32>\phnkciksjl.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\HomeGroup Connections Workstation Machine UPnP] 'Start' = '00000002'
- Windows Security Center
- '<SYSTEM32>\qvoibanxbu.exe' "<SYSTEM32>\phnkciksjl.exe"
- '%WINDIR%\Temp\psdxcs334fkdxr.exe' -r 43469 tcp
- '%TEMP%\psdxcs2y30kdxrjgcizk.exe'
- '<SYSTEM32>\phnkciksjl.exe'
- <SYSTEM32>\obizehvxau\run
- <SYSTEM32>\obizehvxau\rng
- %WINDIR%\Temp\psdxcs334fkdxr.exe
- <SYSTEM32>\obizehvxau\cfg
- <SYSTEM32>\qvoibanxbu.exe
- %TEMP%\psdxcs2y30kdxrjgcizk.exe
- <SYSTEM32>\obizehvxau\tst
- <SYSTEM32>\phnkciksjl.exe
- <SYSTEM32>\obizehvxau\etc
- <SYSTEM32>\qvoibanxbu.exe
- <SYSTEM32>\phnkciksjl.exe
- %WINDIR%\Temp\psdxcs334fkdxr.exe
- %TEMP%\psdxcs2y30kdxrjgcizk.exe
- <DRIVERS>\etc\hosts
- 'hi###ule.net':80
- 'wh###ule.net':80
- 'hi###unt.net':80
- 'wh###unt.net':80
- 'fe###how.net':80
- 'lo###how.net':80
- 'hi###ear.net':80
- 'wh###ear.net':80
- 'mo###ule.net':80
- 'ju###ule.net':80
- 'mo###unt.net':80
- 'ju###unt.net':80
- 'hi###how.net':80
- 'wh###how.net':80
- 'mo###ear.net':80
- 'ju###ear.net':80
- 'fe###unt.net':80
- 'wi###how.net':80
- 'dr###hunt.net':80
- 'th###hear.net':80
- 'dr###show.net':80
- 'wi###ule.net':80
- 'dr###hear.net':80
- 'wi###unt.net':80
- 'dr###rule.net':80
- 'lo###ule.net':80
- 'fe###ear.net':80
- 'lo###unt.net':80
- 'fe###ule.net':80
- 'th###hunt.net':80
- 'th###rule.net':80
- 'lo###ear.net':80
- 'th###show.net':80
- 'ab###unt.net':80
- 'kn###ule.net':80
- 'ab###how.net':80
- 'kn###unt.net':80
- 'ab###ear.net':80
- 'pi###how.net':80
- 'ab###ule.net':80
- 'kn###ear.net':80
- 'la###onea.com':80
- 'da###ekilai.com':80
- 'do####n4guia.com':80
- 'fr###secas.com':80
- 'wi###uter.net':80
- 'kn###how.net':80
- 'ta###fruit.net':80
- 'st###march.net':80
- 'so###how.net':80
- 'ro###ule.net':80
- 'si###ule.net':80
- 'ro###unt.net':80
- 'si###unt.net':80
- 'mo###how.net':80
- 'ju###how.net':80
- 'ro###ear.net':80
- 'si###ear.net':80
- 'pi###ule.net':80
- 'so###ule.net':80
- 'pi###unt.net':80
- 'so###unt.net':80
- 'ro###how.net':80
- 'si###how.net':80
- 'pi###ear.net':80
- 'so###ear.net':80
- http://hi###ule.net/forum/search.php?me#########################################
- http://wh###ule.net/forum/search.php?me#########################################
- http://hi###unt.net/forum/search.php?me#########################################
- http://wh###unt.net/forum/search.php?me#########################################
- http://fe###how.net/forum/search.php?me#########################################
- http://lo###how.net/forum/search.php?me#########################################
- http://hi###ear.net/forum/search.php?me#########################################
- http://wh###ear.net/forum/search.php?me#########################################
- http://mo###ule.net/forum/search.php?me#########################################
- http://ju###ule.net/forum/search.php?me#########################################
- http://mo###unt.net/forum/search.php?me#########################################
- http://ju###unt.net/forum/search.php?me#########################################
- http://hi###how.net/forum/search.php?me#########################################
- http://wh###how.net/forum/search.php?me#########################################
- http://mo###ear.net/forum/search.php?me#########################################
- http://ju###ear.net/forum/search.php?me#########################################
- http://fe###unt.net/forum/search.php?me#########################################
- http://wi###how.net/forum/search.php?me#########################################
- http://dr###hunt.net/forum/search.php?me#########################################
- http://th###hear.net/forum/search.php?me#########################################
- http://dr###show.net/forum/search.php?me#########################################
- http://wi###ule.net/forum/search.php?me#########################################
- http://dr###hear.net/forum/search.php?me#########################################
- http://wi###unt.net/forum/search.php?me#########################################
- http://dr###rule.net/forum/search.php?me#########################################
- http://lo###ule.net/forum/search.php?me#########################################
- http://fe###ear.net/forum/search.php?me#########################################
- http://lo###unt.net/forum/search.php?me#########################################
- http://fe###ule.net/forum/search.php?me#########################################
- http://th###hunt.net/forum/search.php?me#########################################
- http://th###rule.net/forum/search.php?me#########################################
- http://lo###ear.net/forum/search.php?me#########################################
- http://th###show.net/forum/search.php?me#########################################
- http://ab###unt.net/forum/search.php?me#########################################
- http://kn###ule.net/forum/search.php?me#########################################
- http://ab###how.net/forum/search.php?me#########################################
- http://kn###unt.net/forum/search.php?me#########################################
- http://ab###ear.net/forum/search.php?me#########################################
- http://pi###how.net/forum/search.php?me#########################################
- http://ab###ule.net/forum/search.php?me#########################################
- http://kn###ear.net/forum/search.php?me#########################################
- http://la###onea.com/forum/search.php?me#########################################
- http://da###ekilai.com/forum/search.php?me#########################################
- http://do####n4guia.com/forum/search.php?me#########################################
- http://fr###secas.com/forum/search.php?me#########################################
- http://wi###uter.net/forum/search.php?me#########################################
- http://kn###how.net/forum/search.php?me#########################################
- http://ta###fruit.net/forum/search.php?me#########################################
- http://st###march.net/forum/search.php?me#########################################
- http://so###how.net/forum/search.php?me#########################################
- http://ro###ule.net/forum/search.php?me#########################################
- http://si###ule.net/forum/search.php?me#########################################
- http://ro###unt.net/forum/search.php?me#########################################
- http://si###unt.net/forum/search.php?me#########################################
- http://mo###how.net/forum/search.php?me#########################################
- http://ju###how.net/forum/search.php?me#########################################
- http://ro###ear.net/forum/search.php?me#########################################
- http://si###ear.net/forum/search.php?me#########################################
- http://pi###ule.net/forum/search.php?me#########################################
- http://so###ule.net/forum/search.php?me#########################################
- http://pi###unt.net/forum/search.php?me#########################################
- http://so###unt.net/forum/search.php?me#########################################
- http://ro###how.net/forum/search.php?me#########################################
- http://si###how.net/forum/search.php?me#########################################
- http://pi###ear.net/forum/search.php?me#########################################
- http://so###ear.net/forum/search.php?me#########################################
- DNS ASK wh###ule.net
- DNS ASK hi###ear.net
- DNS ASK wh###unt.net
- DNS ASK hi###ule.net
- DNS ASK lo###how.net
- DNS ASK fe###unt.net
- DNS ASK wh###ear.net
- DNS ASK fe###how.net
- DNS ASK hi###unt.net
- DNS ASK mo###ule.net
- DNS ASK ju###ule.net
- DNS ASK mo###unt.net
- DNS ASK ju###unt.net
- DNS ASK hi###how.net
- DNS ASK wh###how.net
- DNS ASK mo###ear.net
- DNS ASK ju###ear.net
- DNS ASK dr###hunt.net
- DNS ASK wi###unt.net
- DNS ASK dr###show.net
- DNS ASK wi###how.net
- DNS ASK dr###hear.net
- DNS ASK wi###ear.net
- DNS ASK dr###rule.net
- DNS ASK wi###ule.net
- DNS ASK th###hear.net
- DNS ASK lo###ule.net
- DNS ASK fe###ear.net
- DNS ASK lo###unt.net
- DNS ASK fe###ule.net
- DNS ASK th###hunt.net
- DNS ASK th###rule.net
- DNS ASK lo###ear.net
- DNS ASK th###show.net
- DNS ASK ab###unt.net
- DNS ASK kn###ule.net
- DNS ASK ab###how.net
- DNS ASK kn###unt.net
- DNS ASK ab###ear.net
- DNS ASK pi###how.net
- DNS ASK ab###ule.net
- DNS ASK kn###ear.net
- DNS ASK la###onea.com
- DNS ASK da###ekilai.com
- DNS ASK do####n4guia.com
- DNS ASK fr###secas.com
- DNS ASK wi###uter.net
- DNS ASK kn###how.net
- DNS ASK ta###fruit.net
- DNS ASK st###march.net
- DNS ASK so###how.net
- DNS ASK ro###ule.net
- DNS ASK si###ule.net
- DNS ASK ro###unt.net
- DNS ASK si###unt.net
- DNS ASK mo###how.net
- DNS ASK ju###how.net
- DNS ASK ro###ear.net
- DNS ASK si###ear.net
- DNS ASK pi###ule.net
- DNS ASK so###ule.net
- DNS ASK pi###unt.net
- DNS ASK so###unt.net
- DNS ASK ro###how.net
- DNS ASK si###how.net
- DNS ASK pi###ear.net
- DNS ASK so###ear.net
- '23#.#55.255.250':1900