Technical Information
To ensure autorun and distribution
Creates the following services
- [<HKLM>\System\CurrentControlSet\Services\Studio Notification UPnP Source Performance] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Studio Notification UPnP Source Performance] 'ImagePath' = 'C:\eqlsp97yfd\kbcucn9xj7b.exe'
Modifies file system
Creates the following files
- %WINDIR%\eqlsp97yfd\omtg4slrkdtf
- C:\eqlsp97yfd\omtg4slrkdtf
- C:\eqlsp97yfd\tyxvokila4aukqg6mysp.exe
- C:\eqlsp97yfd\kbcucn9xj7b.exe
- C:\eqlsp97yfd\org9dxv.exe
- C:\eqlsp97yfd\d1lxari
Sets the 'hidden' attribute to the following files
- C:\eqlsp97yfd\kbcucn9xj7b.exe
- C:\eqlsp97yfd\org9dxv.exe
Deletes the following files
- %WINDIR%\eqlsp97yfd\omtg4slrkdtf
- C:\eqlsp97yfd\tyxvokila4aukqg6mysp.exe
Substitutes the following files
- %WINDIR%\eqlsp97yfd\omtg4slrkdtf
Network activity
TCP
HTTP GET requests
- http://sp##tnav.ru/index.php
- http://al#####rapatterson.net/index.php
- http://gu#####enviviette.net/index.php
- http://ma#####nacharlene.net/index.php
- http://ch#####asrupertson.net/index.php
- http://ch#####necassarah.net/index.php
- http://ch#####necassarah.ru/index.php
- http://tr#####ancotterill.net/index.php
- http://se#####ercarpenter.net/index.php
- http://tr#####ancarpenter.net/index.php
- http://ma#####nekiersten.net/index.php
- http://ch#####assymphony.net/index.php
- http://sh#####nesouthgate.net/index.php
- http://co#####ercheyenne.net/index.php
- http://ra#####lebradford.net/index.php
- http://do##bate.cn/index.php
- http://ro#####ltshaquila.net/index.php
- http://gw#####reangelica.net/index.php
UDP
- DNS ASK sc####ainbow.net
- DNS ASK ka#####nerupertson.net
- DNS ASK co#####nerupertson.net
- DNS ASK co#####necarpenter.net
- DNS ASK ka#####necarpenter.net
- DNS ASK ka#####nerowbottom.net
- DNS ASK co#####nerowbottom.ru
- DNS ASK ra#####ferowbottom.net
- DNS ASK co#####nerowbottom.net
- DNS ASK ra#####fegranville.net
- DNS ASK ro#####ltrupertson.net
- DNS ASK ra#####ferupertson.net
- DNS ASK ro#####ltcarpenter.ru
- DNS ASK ro#####ltcarpenter.net
- DNS ASK ra#####fecarpenter.net
- DNS ASK co#####negranville.net
- DNS ASK ka#####nerupertson.ru
- DNS ASK ro#####ltgranville.net
- DNS ASK ro#####ltrowbottom.net
- DNS ASK ch#####asrowbottom.net
- DNS ASK ma#####nerupertson.net
- DNS ASK co#####uscarpenter.net
- DNS ASK ma#####necarpenter.net
- DNS ASK co#####usrowbottom.net
- DNS ASK ma#####nerowbottom.net
- DNS ASK ch#####asgranville.ru
- DNS ASK ch#####asgranville.net
- DNS ASK sh#####negranville.net
- DNS ASK ch#####asrupertson.net
- DNS ASK sh#####nerupertson.net
- DNS ASK ch#####ascarpenter.net
- DNS ASK sh#####necarpenter.ru
- DNS ASK sh#####necarpenter.net
- DNS ASK sh#####nerowbottom.net
- DNS ASK co#####usrupertson.net
- DNS ASK ka#####negranville.net
- DNS ASK sh#####leharrison.net
- DNS ASK qu#####lagranville.ru
- DNS ASK al#####racassarah.net
- DNS ASK al#####raviviette.net
- DNS ASK am#####neangelica.net
- DNS ASK ce#####neangelica.net
- DNS ASK am#####neharrison.ru
- DNS ASK am#####neharrison.net
- DNS ASK ce#####neharrison.net
- DNS ASK qu#####lagranville.net
- DNS ASK am#####necassarah.net
- DNS ASK am#####neviviette.net
- DNS ASK ce#####neviviette.ru
- DNS ASK ce#####neviviette.net
- DNS ASK ch#####neangelica.net
- DNS ASK sh#####leangelica.net
- DNS ASK al#####racassarah.ru
- DNS ASK ma#####nacassarah.net
- DNS ASK ma#####naviviette.net
- DNS ASK al#####raharrison.net
- DNS ASK ma#####naharrison.net
- DNS ASK qu#####larupertson.net
- DNS ASK ma#####nerowbottom.ru
- DNS ASK qu#####larowbottom.net
- DNS ASK ka#####neangelica.net
- DNS ASK al#####erangelica.net
- DNS ASK ka#####neharrison.net
- DNS ASK ma#####negranville.net
- DNS ASK al#####erharrison.ru
- DNS ASK ma#####nerupertson.ru
- DNS ASK ka#####necassarah.net
- DNS ASK ka#####neviviette.net
- DNS ASK al#####erviviette.net
- DNS ASK ma#####naangelica.ru
- DNS ASK ma#####naangelica.net
- DNS ASK al#####raangelica.net
- DNS ASK al#####erharrison.net
- DNS ASK qu#####lacarpenter.net
- DNS ASK al#####ercassarah.net
- DNS ASK ce#####necassarah.net
- DNS ASK ch#####neharrison.net
- DNS ASK co#####errowbottom.net
- DNS ASK ka#####nemillhouse.net
- DNS ASK co#####nemillhouse.ru
- DNS ASK co#####nemillhouse.net
- DNS ASK ka#####nelongstaff.net
- DNS ASK co#####nelongstaff.net
- DNS ASK ka#####netittensor.net
- DNS ASK co#####netittensor.net
- DNS ASK ka#####necotterill.ru
- DNS ASK ka#####necotterill.net
- DNS ASK co#####necotterill.net
- DNS ASK ro#####ltmillhouse.net
- DNS ASK ra#####femillhouse.net
- DNS ASK ro#####ltlongstaff.net
- DNS ASK sh#####netittensor.net
- DNS ASK ch#####astittensor.net
- DNS ASK sh#####necotterill.net
- DNS ASK ro#####lttittensor.net
- DNS ASK ra#####felongstaff.ru
- DNS ASK ra#####felongstaff.net
- DNS ASK co#####usmillhouse.net
- DNS ASK ma#####nemillhouse.net
- DNS ASK co#####uslongstaff.ru
- DNS ASK co#####uslongstaff.net
- DNS ASK ma#####nelongstaff.net
- DNS ASK co#####ustittensor.net
- DNS ASK ma#####netittensor.net
- DNS ASK co#####uscotterill.net
- DNS ASK ma#####necotterill.ru
- DNS ASK ma#####necotterill.net
- DNS ASK ch#####asmillhouse.net
- DNS ASK sh#####nemillhouse.net
- DNS ASK ch#####aslongstaff.net
- DNS ASK ch#####astittensor.ru
- DNS ASK co#####ercotterill.net
- DNS ASK sh#####nelongstaff.net
- DNS ASK ra#####fetittensor.net
- DNS ASK tr#####anrupertson.net
- DNS ASK ma#####nemillhouse.ru
- DNS ASK tr#####ancarpenter.net
- DNS ASK se#####ercarpenter.net
- DNS ASK tr#####anrowbottom.net
- DNS ASK se#####errowbottom.net
- DNS ASK co#####ergranville.net
- DNS ASK ch#####ascotterill.net
- DNS ASK ra#####legranville.ru
- DNS ASK co#####errupertson.net
- DNS ASK ra#####lerupertson.net
- DNS ASK co#####ercarpenter.net
- DNS ASK ra#####lecarpenter.net
- DNS ASK co#####errowbottom.ru
- DNS ASK se#####ergranville.net
- DNS ASK tr#####angranville.net
- DNS ASK ra#####legranville.net
- DNS ASK tr#####ancarpenter.ru
- DNS ASK se#####errupertson.net
- DNS ASK se#####narowbottom.net
- DNS ASK se#####narowbottom.ru
- DNS ASK qu#####lamillhouse.net
- DNS ASK qu#####lalongstaff.net
- DNS ASK qu#####latittensor.ru
- DNS ASK qu#####latittensor.net
- DNS ASK ra#####lerowbottom.net
- DNS ASK qu#####lacotterill.net
- DNS ASK se#####nagranville.net
- DNS ASK co#####usgranville.net
- DNS ASK jo#####nerupertson.ru
- DNS ASK se#####narupertson.net
- DNS ASK jo#####necarpenter.net
- DNS ASK se#####nacarpenter.net
- DNS ASK jo#####nerowbottom.net
- DNS ASK jo#####negranville.net
- DNS ASK ra#####fecotterill.net
- DNS ASK ro#####ltcotterill.net
- DNS ASK jo#####nerupertson.net
- DNS ASK ro#####ltcheyenne.ru
- DNS ASK ch#####necassarah.ru
- DNS ASK ge#####namadoline.net
- DNS ASK an#####lecharisse.net
- DNS ASK gu#####encharisse.ru
- DNS ASK gu#####encharisse.net
- DNS ASK an#####lecharlene.net
- DNS ASK gu#####encharlene.net
- DNS ASK an#####leannabeth.net
- DNS ASK gw#####reannabeth.net
- DNS ASK gu#####enannabeth.net
- DNS ASK an#####lemadoline.net
- DNS ASK gu#####enmadoline.net
- DNS ASK gw#####recharisse.net
- DNS ASK ch#####ancharisse.net
- DNS ASK gw#####recharlene.net
- DNS ASK ch#####leannabeth.net
- DNS ASK ch#####ancharlene.ru
- DNS ASK ch#####lemadoline.net
- DNS ASK an#####lemadoline.ru
- DNS ASK ge#####naannabeth.net
- DNS ASK ch#####nemadoline.net
- DNS ASK za#####ahcharisse.net
- DNS ASK ar#####ldcharlene.ru
- DNS ASK ar#####ldcharlene.net
- DNS ASK za#####ahcharlene.net
- DNS ASK ar#####ldannabeth.net
- DNS ASK za#####ahannabeth.net
- DNS ASK ar#####ldmadoline.net
- DNS ASK za#####ahmadoline.ru
- DNS ASK za#####ahmadoline.net
- DNS ASK ge#####nacharisse.net
- DNS ASK ch#####lecharisse.net
- DNS ASK ge#####nacharlene.net
- DNS ASK ge#####naannabeth.ru
- DNS ASK ch#####ancharlene.net
- DNS ASK sh#####lemadoline.net
- DNS ASK ch#####lecharlene.net
- DNS ASK ch#####necassarah.net
- DNS ASK ch#####anannabeth.net
- DNS ASK al#####rasherburne.net
- DNS ASK ce#####neunderhill.net
- DNS ASK am#####nepatterson.net
- DNS ASK ce#####nepatterson.net
- DNS ASK am#####neblackwood.ru
- DNS ASK am#####neblackwood.net
- DNS ASK ce#####neblackwood.net
- DNS ASK al#####rasherburne.ru
- DNS ASK am#####nesherburne.net
- DNS ASK ch#####neunderhill.net
- DNS ASK sh#####leunderhill.ru
- DNS ASK sh#####leunderhill.net
- DNS ASK ch#####nepatterson.net
- DNS ASK ma#####nasherburne.net
- DNS ASK al#####rablackwood.net
- DNS ASK ma#####nablackwood.net
- DNS ASK am#####neunderhill.net
- DNS ASK al#####rapatterson.net
- DNS ASK gw#####remadoline.net
- DNS ASK ch#####anmadoline.net
- DNS ASK ka#####neunderhill.net
- DNS ASK al#####erunderhill.net
- DNS ASK ka#####nepatterson.net
- DNS ASK al#####erpatterson.net
- DNS ASK sh#####leannabeth.net
- DNS ASK ka#####neblackwood.net
- DNS ASK al#####erblackwood.net
- DNS ASK ar#####ldcharisse.net
- DNS ASK ka#####nesherburne.net
- DNS ASK ma#####naunderhill.net
- DNS ASK al#####raunderhill.net
- DNS ASK ma#####napatterson.ru
- DNS ASK ma#####napatterson.net
- DNS ASK al#####erblackwood.ru
- DNS ASK sh#####leannabeth.ru
- DNS ASK ka#####neunderhill.ru
- DNS ASK al#####ersherburne.net
- DNS ASK ch#####neannabeth.net
- DNS ASK sh#####lecharlene.net
- DNS ASK ge#####naviviette.net
- DNS ASK an#####leangelica.net
- DNS ASK gu#####enangelica.net
- DNS ASK an#####leharrison.net
- DNS ASK gu#####enharrison.net
- DNS ASK an#####lecassarah.net
- DNS ASK gu#####encassarah.ru
- DNS ASK gu#####encassarah.net
- DNS ASK an#####leviviette.net
- DNS ASK gu#####enviviette.net
- DNS ASK gw#####reangelica.net
- DNS ASK ch#####anangelica.net
- DNS ASK gw#####reharrison.ru
- DNS ASK ch#####lecassarah.net
- DNS ASK ge#####nacassarah.net
- DNS ASK ch#####leharrison.ru
- DNS ASK an#####leangelica.ru
- DNS ASK ch#####leharrison.net
- DNS ASK sh#####lecassarah.net
- DNS ASK ra#####letittensor.net
- DNS ASK sh#####leviviette.net
- DNS ASK ar#####ldangelica.net
- DNS ASK za#####ahangelica.ru
- DNS ASK za#####ahangelica.net
- DNS ASK ar#####ldharrison.net
- DNS ASK gw#####reharrison.net
- DNS ASK za#####ahharrison.net
- DNS ASK ch#####anharrison.net
- DNS ASK za#####ahcassarah.net
- DNS ASK ar#####ldviviette.net
- DNS ASK za#####ahviviette.net
- DNS ASK ge#####naangelica.net
- DNS ASK ch#####leangelica.net
- DNS ASK ge#####naharrison.net
- DNS ASK ar#####ldcassarah.net
- DNS ASK ch#####neviviette.net
- DNS ASK ar#####ldviviette.ru
- DNS ASK ra#####lecotterill.net
- DNS ASK ch#####ancassarah.net
- DNS ASK ch#####anviviette.net
- DNS ASK ce#####necharisse.net
- DNS ASK am#####necharlene.net
- DNS ASK ce#####necharlene.ru
- DNS ASK am#####neannabeth.net
- DNS ASK ce#####necharlene.net
- DNS ASK ch#####leviviette.net
- DNS ASK ce#####neannabeth.net
- DNS ASK ce#####nemadoline.net
- DNS ASK ch#####necharisse.ru
- DNS ASK ch#####necharisse.net
- DNS ASK sh#####lecharisse.net
- DNS ASK ch#####necharlene.net
- DNS ASK ma#####namadoline.ru
- DNS ASK al#####raannabeth.net
- DNS ASK am#####nemadoline.net
- DNS ASK am#####necharisse.net
- DNS ASK al#####ramadoline.net
- DNS ASK ma#####naannabeth.net
- DNS ASK al#####racharlene.net
- DNS ASK ka#####necharisse.net
- DNS ASK al#####ercharisse.net
- DNS ASK ka#####necharlene.net
- DNS ASK al#####ercharlene.net
- DNS ASK gw#####recassarah.net
- DNS ASK ka#####neannabeth.ru
- DNS ASK al#####erannabeth.net
- DNS ASK ma#####namadoline.net
- DNS ASK ka#####nemadoline.net
- DNS ASK ma#####nacharisse.net
- DNS ASK al#####racharisse.ru
- DNS ASK al#####racharisse.net
- DNS ASK ma#####nacharlene.net
- DNS ASK ka#####neannabeth.net
- DNS ASK ch#####anviviette.ru
- DNS ASK gw#####reviviette.net
- DNS ASK al#####ermadoline.net
- DNS ASK ra#####letittensor.ru
- DNS ASK co#####ertittensor.net
- DNS ASK ra#####lelongstaff.net
- DNS ASK co#####ussouthgate.net
- DNS ASK ma#####nesouthgate.net
- DNS ASK co#####usroyceston.net
- DNS ASK ma#####neroyceston.net
- DNS ASK ch#####ashoneysett.net
- DNS ASK sh#####nehoneysett.ru
- DNS ASK sh#####nehoneysett.net
- DNS ASK ch#####asarkwright.net
- DNS ASK sh#####nearkwright.net
- DNS ASK ch#####assouthgate.net
- DNS ASK sh#####nesouthgate.net
- DNS ASK ch#####asroyceston.ru
- DNS ASK ch#####asroyceston.net
- DNS ASK co#####usarkwright.net
- DNS ASK ma#####nehoneysett.net
- DNS ASK co#####ussouthgate.ru
- DNS ASK co#####nehoneysett.net
- DNS ASK sh#####neroyceston.net
- DNS ASK ka#####nehoneysett.net
- DNS ASK se#####ersouthgate.ru
- DNS ASK se#####ersouthgate.net
- DNS ASK tr#####anroyceston.net
- DNS ASK se#####erroyceston.net
- DNS ASK co#####erhoneysett.net
- DNS ASK ra#####lehoneysett.net
- DNS ASK co#####erarkwright.ru
- DNS ASK co#####erarkwright.net
- DNS ASK ra#####learkwright.net
- DNS ASK co#####ersouthgate.net
- DNS ASK ra#####lesouthgate.net
- DNS ASK co#####erroyceston.net
- DNS ASK ra#####leroyceston.ru
- DNS ASK co#####ushoneysett.net
- DNS ASK se#####erarkwright.net
- DNS ASK ra#####leroyceston.net
- DNS ASK ka#####nearkwright.net
- DNS ASK qu#####laroyceston.ru
- DNS ASK ka#####nesouthgate.net
- DNS ASK se#####nasymphony.net
- DNS ASK jo#####nekiersten.net
- DNS ASK se#####nakiersten.net
- DNS ASK jo#####nebradford.ru
- DNS ASK jo#####nebradford.net
- DNS ASK tr#####anhoneysett.net
- DNS ASK se#####nabradford.net
- DNS ASK se#####nacheyenne.net
- DNS ASK tr#####ansymphony.net
- DNS ASK se#####ersymphony.ru
- DNS ASK se#####ersymphony.net
- DNS ASK tr#####ankiersten.net
- DNS ASK qu#####lasouthgate.net
- DNS ASK qu#####laarkwright.net
- DNS ASK jo#####necheyenne.net
- DNS ASK jo#####nesymphony.net
- DNS ASK qu#####laroyceston.net
- DNS ASK ma#####nearkwright.ru
- DNS ASK qu#####lahoneysett.net
- DNS ASK co#####nesouthgate.net
- DNS ASK ka#####neroyceston.net
- DNS ASK co#####neroyceston.net
- DNS ASK ro#####lthoneysett.ru
- DNS ASK tr#####anarkwright.net
- DNS ASK ro#####lthoneysett.net
- DNS ASK ro#####ltarkwright.net
- DNS ASK tr#####ansouthgate.net
- DNS ASK ra#####fearkwright.net
- DNS ASK ra#####fesouthgate.ru
- DNS ASK ra#####fesouthgate.net
- DNS ASK ro#####ltroyceston.net
- DNS ASK ra#####feroyceston.net
- DNS ASK ra#####fehoneysett.net
- DNS ASK co#####nearkwright.net
- DNS ASK co#####nearkwright.ru
- DNS ASK ro#####ltsouthgate.net
- DNS ASK se#####erhoneysett.net
- DNS ASK tr#####anhoneysett.ru
- DNS ASK co#####neharrelson.net
- DNS ASK cl#####ortswomen.com
- DNS ASK ga#####yundongyuan.cn
- DNS ASK si###ypeas.net
- DNS ASK ma#####nebannerman.net
- DNS ASK co#####usharrelson.net
- DNS ASK ma#####neharrelson.net
- DNS ASK ch#####asbroadbent.ru
- DNS ASK ch#####asbroadbent.net
- DNS ASK sh#####nebroadbent.net
- DNS ASK ch#####assanderson.net
- DNS ASK sh#####nesanderson.net
- DNS ASK ch#####asbannerman.net
- DNS ASK sh#####nebannerman.ru
- DNS ASK bu####rmansion.com
- DNS ASK ha####nhalflion.net
- DNS ASK gr###factory.cn
- DNS ASK un###lgrain.org
- DNS ASK cl####portsmen.com
- DNS ASK ye####gdongwu.cn
- DNS ASK pi##asia.cn
- DNS ASK sp##tnav.ru
- DNS ASK ag#####anabolics.com
- DNS ASK ka#######ayajivayapriroda.ru
- DNS ASK sc#####epuzzlechess.org
- DNS ASK na##top.ru
- DNS ASK sh#####nebannerman.net
- DNS ASK se#####erkiersten.net
- DNS ASK ca#####eeitinthecup.org
- DNS ASK ch####isportsmen.ru
- DNS ASK ta#####pielenreiten.org
- DNS ASK gu##155.cn
- DNS ASK so####ryducks.com
- DNS ASK ga####liongrass.net
- DNS ASK do##bate.cn
- DNS ASK to###tosales.ru
- DNS ASK pr####anabolikov.ru
- DNS ASK sh#####lepatterson.net
- DNS ASK ch#####asharrelson.net
- DNS ASK ka#####nesanderson.ru
- DNS ASK qu#####lasanderson.net
- DNS ASK qu#####labannerman.net
- DNS ASK ma#####neharrelson.ru
- DNS ASK qu#####laharrelson.net
- DNS ASK jo#####nehoneysett.net
- DNS ASK pr##card.ru
- DNS ASK se#####nahoneysett.net
- DNS ASK se#####naarkwright.ru
- DNS ASK se#####naarkwright.net
- DNS ASK jo#####nesouthgate.net
- DNS ASK se#####nasouthgate.net
- DNS ASK jo#####neroyceston.net
- DNS ASK se#####naroyceston.net
- DNS ASK qu#####labroadbent.ru
- DNS ASK jo#####nearkwright.net
- DNS ASK ma#####nesanderson.net
- DNS ASK qu#####labroadbent.net
- DNS ASK ma#####nebroadbent.net
- DNS ASK ra#####feharrelson.net
- DNS ASK ka#####nesanderson.net
- DNS ASK co#####nesanderson.net
- DNS ASK ka#####nebannerman.net
- DNS ASK co#####nebannerman.net
- DNS ASK ka#####neharrelson.net
- DNS ASK sh#####neharrelson.net
- DNS ASK co#####neharrelson.ru
- DNS ASK ka#####nebroadbent.net
- DNS ASK ro#####ltbroadbent.net
- DNS ASK ro#####ltsanderson.net
- DNS ASK ra#####fesanderson.net
- DNS ASK ro#####ltbannerman.ru
- DNS ASK ro#####ltbannerman.net
- DNS ASK ra#####febannerman.net
- DNS ASK co#####nebroadbent.net
- DNS ASK ro#####ltharrelson.net
- DNS ASK ra#####febroadbent.net
- DNS ASK ce#####nesherburne.net
- DNS ASK tr#####anbradford.net
- DNS ASK se#####ercheyenne.net
- DNS ASK ch#####ascallahan.net
- DNS ASK sh#####necallahan.net
- DNS ASK ch#####askristeen.net
- DNS ASK sh#####nekristeen.net
- DNS ASK ka#####nemarcelyn.ru
- DNS ASK ro#####ltmarcelyn.net
- DNS ASK ka#####nemarcelyn.net
- DNS ASK ka#####neshaquila.net
- DNS ASK co#####neshaquila.net
- DNS ASK ka#####necallahan.net
- DNS ASK co#####necallahan.ru
- DNS ASK co#####necallahan.net
- DNS ASK ka#####nekristeen.net
- DNS ASK ch#####asshaquila.net
- DNS ASK co#####nemarcelyn.net
- DNS ASK sh#####neshaquila.net
- DNS ASK ma#####nearkwright.net
- DNS ASK sh#####neshaquila.ru
- DNS ASK sh#####nemarcelyn.net
- DNS ASK co#####ercallahan.ru
- DNS ASK co#####erkristeen.net
- DNS ASK ra#####lekristeen.net
- DNS ASK co#####usmarcelyn.net
- DNS ASK ma#####nemarcelyn.ru
- DNS ASK ma#####nemarcelyn.net
- DNS ASK co#####usshaquila.net
- DNS ASK ma#####neshaquila.net
- DNS ASK co#####uscallahan.net
- DNS ASK ma#####necallahan.net
- DNS ASK co#####uskristeen.ru
- DNS ASK co#####uskristeen.net
- DNS ASK ch#####asmarcelyn.net
- DNS ASK ra#####leshaquila.net
- DNS ASK ma#####nekristeen.net
- DNS ASK co#####nekristeen.net
- DNS ASK ra#####femarcelyn.net
- DNS ASK jo#####necotterill.net
- DNS ASK ro#####ltcallahan.net
- DNS ASK se#####ermillhouse.net
- DNS ASK tr#####anlongstaff.net
- DNS ASK se#####erlongstaff.ru
- DNS ASK se#####erlongstaff.net
- DNS ASK tr#####antittensor.net
- DNS ASK ro#####ltshaquila.ru
- DNS ASK se#####ertittensor.net
- DNS ASK se#####ercotterill.net
- DNS ASK co#####ermillhouse.ru
- DNS ASK co#####ermillhouse.net
- DNS ASK ra#####lemillhouse.net
- DNS ASK co#####erlongstaff.net
- DNS ASK jo#####necotterill.ru
- DNS ASK se#####natittensor.net
- DNS ASK tr#####ancotterill.net
- DNS ASK tr#####anmillhouse.net
- DNS ASK se#####nacotterill.net
- DNS ASK jo#####netittensor.net
- DNS ASK se#####nalongstaff.net
- DNS ASK ra#####fecallahan.net
- DNS ASK ro#####ltkristeen.net
- DNS ASK ra#####fekristeen.ru
- DNS ASK ra#####fekristeen.net
- DNS ASK co#####ershaquila.net
- DNS ASK qu#####lamarcelyn.net
- DNS ASK ma#####necallahan.ru
- DNS ASK ra#####lecallahan.net
- DNS ASK qu#####lacallahan.net
- DNS ASK jo#####nemillhouse.net
- DNS ASK se#####namillhouse.ru
- DNS ASK se#####namillhouse.net
- DNS ASK jo#####nelongstaff.net
- DNS ASK qu#####lashaquila.net
- DNS ASK ra#####feshaquila.net
- DNS ASK ro#####ltshaquila.net
- DNS ASK qu#####lakristeen.net
- DNS ASK co#####ercallahan.net
- DNS ASK ra#####lemarcelyn.net
- DNS ASK co#####ermarcelyn.net
- DNS ASK ch#####askiersten.ru
- DNS ASK ch#####askiersten.net
- DNS ASK sh#####nekiersten.net
- DNS ASK ch#####asbradford.net
- DNS ASK sh#####nebradford.net
- DNS ASK ch#####ascheyenne.net
- DNS ASK sh#####necheyenne.ru
- DNS ASK sh#####necheyenne.net
- DNS ASK ka#####nesymphony.net
- DNS ASK co#####nesymphony.net
- DNS ASK ka#####nekiersten.net
- DNS ASK co#####nekiersten.net
- DNS ASK co#####uscheyenne.net
- DNS ASK ma#####nebradford.ru
- DNS ASK se#####erbradford.net
- DNS ASK sh#####nesymphony.net
- DNS ASK ch#####assymphony.net
- DNS ASK ma#####nebradford.net
- DNS ASK co#####usbradford.net
- DNS ASK co#####ersymphony.net
- DNS ASK ra#####lesymphony.net
- DNS ASK co#####erkiersten.net
- DNS ASK ra#####lekiersten.ru
- DNS ASK ra#####lekiersten.net
- DNS ASK ka#####nebradford.ru
- DNS ASK co#####erbradford.net
- DNS ASK ka#####nebradford.net
- DNS ASK co#####ercheyenne.net
- DNS ASK co#####ussymphony.ru
- DNS ASK co#####ussymphony.net
- DNS ASK ma#####nesymphony.net
- DNS ASK co#####uskiersten.net
- DNS ASK ma#####nekiersten.net
- DNS ASK tr#####ancheyenne.net
- DNS ASK ra#####lebradford.net
- DNS ASK ra#####lecheyenne.net
- DNS ASK tr#####ancheyenne.ru
- DNS ASK ka#####necheyenne.net
- DNS ASK ra#####fesymphony.ru
- DNS ASK se#####nacallahan.net
- DNS ASK jo#####nekristeen.net
- DNS ASK se#####nakristeen.net
- DNS ASK tr#####anmarcelyn.net
- DNS ASK ma#####necheyenne.net
- DNS ASK se#####ermarcelyn.net
- DNS ASK tr#####anshaquila.net
- DNS ASK se#####ershaquila.net
- DNS ASK tr#####ancallahan.net
- DNS ASK se#####ercallahan.net
- DNS ASK tr#####ankristeen.net
- DNS ASK se#####erkristeen.ru
- DNS ASK jo#####neshaquila.net
- DNS ASK tr#####anshaquila.ru
- DNS ASK se#####erkristeen.net
- DNS ASK se#####nacallahan.ru
- DNS ASK jo#####necallahan.net
- DNS ASK se#####nashaquila.net
- DNS ASK se#####namarcelyn.net
- DNS ASK ra#####fesymphony.net
- DNS ASK ro#####ltkiersten.net
- DNS ASK ra#####fekiersten.net
- DNS ASK ro#####ltbradford.net
- DNS ASK co#####nebradford.net
- DNS ASK ra#####febradford.net
- DNS ASK ro#####ltcheyenne.net
- DNS ASK ro#####ltsymphony.net
- DNS ASK ra#####fecheyenne.net
- DNS ASK qu#####lakiersten.ru
- DNS ASK qu#####lakiersten.net
- DNS ASK qu#####labradford.net
- DNS ASK qu#####lacheyenne.net
- DNS ASK co#####necheyenne.net
- DNS ASK jo#####nemarcelyn.ru
- DNS ASK jo#####nemarcelyn.net
- DNS ASK qu#####lasymphony.net
- DNS ASK ch#####neblackwood.net
Miscellaneous
Creates and executes the following
- 'C:\eqlsp97yfd\tyxvokila4aukqg6mysp.exe'
- 'C:\eqlsp97yfd\kbcucn9xj7b.exe'
- 'C:\eqlsp97yfd\org9dxv.exe' "c:\eqlsp97yfd\kbcucn9xj7b.exe"