Trojan.DownLoader33.4492

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\svchtisks.exe

Modifies file system

Creates the following files

%TEMP%\s.bat
%TEMP%\<File name>.exe.pid

Network activity

Connects to

'iz###.com.pl':80
'iz######tvo-riva.company.bg':80
'iz##lta.com':80

TCP

HTTP GET requests

http://17#.##1.14.125:8888/bots/knock?wo###################################### via 17#.#21.14.125
http://iw###.org.ua/phpmyadmin/
http://ix##pgh.org/.tools/phpMyAdmin/current/
http://ix##ro.com/phpmyadmin/
http://iy##a.co.th/phpmyadmin/
http://iw#####ordevents.com/phpMyAdmin/
http://17#.##1.14.125:8888/gw?wo####################### via 17#.#21.14.125
http://iw###et.info/phpmyadmin/
http://iw#.co.jp/phpMyAdmin/
http://iy###road.com/phpmyadmin/
http://iw###rea.com/mysql/
http://iw##tor.com/phpMyAdmin/
http://iw###okami.com/phpMyAdmin/
http://iw####oupeace.com/phpMyAdmin/
http://iw##u.me/phpMyAdmin/
http://iw##.org/phpmyadmin/
http://iy####sushinsha.com/phpmyadmin/
http://iw##z.com/phpmyadmin/
http://ix##ra.com/phpmyadmin/
http://ix##321.com/phpMyAdmin/
http://ix##s.com/phpMyAdmin/
http://iw#z.in/phpmyadmin/
http://ix####rtland.org/.tools/phpMyAdmin/current/
http://iw##tor.com/phpmyadmin/
http://iw#u.me/.tools/phpMyAdmin/current/
http://ix###laby.com/.tools/phpMyAdmin/current/
http://iw##c.org/phpmyadmin/
http://ix##orer.is/phpmyadmin/
http://iw###wood.pl/phpmyadmin/
http://iw#.ge/phpMyAdmin/
http://ix###lor.net/phpMyAdmin/
http://ix##age.com/phpmyadmin/
http://ix###orm.com/phpmyadmin/
http://ix##4k.com/phpmyadmin/
http://iw##on.net/phpmyadmin/
http://ix##pc.com/pma/
http://iw###ehair.com/phpMyAdmin/
http://iw##.org/pma/
http://ix###lor.net/phpmyadmin/
http://ix##.com/phpmyadmin/
http://iw####odental.com/phpMyAdmin/
http://ix##ng.tk/phpMyAdmin/
http://iw###smart2.org/phpmyadmin/
http://ix##pc.com/phpmyadmin/
http://iw####dulrahman.com/phpmyadmin/
http://iy####myonline.com/pma/
http://iw####resents.com/phpmyadmin/
http://iw####odental.com/phpmyadmin/
http://iy####myonline.com/phpMyAdmin/
http://iw##i.vn/phpmyadmin/
http://iw#####thdumbasses.com/.tools/phpMyAdmin/current/
http://ix####studios.com/.tools/phpMyAdmin/current/
http://iw####supply.com/phpmyadmin/
http://iw##our.pl/phpmyadmin/
http://iw#.co.th/phpMyAdmin/
http://iw####ergy-stars.ch/phpmyadmin/index.php?to####################################
http://iy####irgroup.com/phpmyadmin/
http://iy####irticaret.com/phpmyadmin/
http://iz##s.com/pma/
http://iz####adomanska.pl/phpmyadmin/
http://iz####adoniec.com/pma/
http://iy###esign.se/pma/
http://iz####nessbody.com/phpMyAdmin/
http://iz##ph.eu/phpmyadmin/
http://iz#####plociennik.pl/phpmyadmin/
http://iz##s.com/phpMyAdmin/
http://iz.#om.ua/phpmyadmin/
http://iz####anowak.com/pma/
http://iz####akaminska.pl/phpmyadmin/
http://iz####lasimon.com/phpmyadmin/
http://iz###ech.com/phpmyadmin/
http://iz###llin.pl/phpmyadmin/
http://iz#####rabehanta.com/pma/
http://iz####adoniec.com/phpMyAdmin/
http://iz#######rtnickaphotography.com/phpmyadmin/
http://iz####abielicka.pl/pma/
http://iz#####rabehanta.com/phpmyadmin/
http://iz####anowak.com/phpmyadmin/
http://iy##f.info/phpmyadmin/
http://iz#######rtnickaphotography.com/pma/
http://iy###ogo.com/phpMyAdmin/
http://iz###magi.com/phpmyadmin/
http://iw##ksol.pl/phpmyadmin/
http://www.es##inc.org/
http://iy###arjooga.fi/pma/
http://iw##iuk.me/phpmyadmin/index.php?to####################################
http://iy###berver.com/phpmyadmin/
http://iy######ermesajlarii.com/phpMyAdmin/
http://iy###ryemek.com/phpmyadmin/
http://iy###nekler.com/phpMyAdmin/
http://iy##.org/pma/
http://iw##tz.fr/phpmyadmin/index.php?to####################################
http://iy###ispa.com/phpMyAdmin/
http://iy####-aijin.net/phpmyadmin/
http://iy###ispa.com/phpmyadmin/
http://iy###arjooga.fi/phpmyadmin/
http://iy#.hu/phpmyadmin/
http://iy##ez.com/phpMyAdmin/
http://iy###tirim.com/.tools/phpMyAdmin/current/
http://iy###icin.com/phpmyadmin/
http://iy##ig.org/phpmyadmin/
http://iz###la-bus.eu/phpmyadmin/
http://iz##ela.xyz/phpmyadmin/
http://iy###nning.com/phpmyadmin/
http://iy##f.info/pma/
http://iy##.org/phpMyAdmin/
http://iy####randpart.com/phpmyadmin/
http://iy##.org/phpmyadmin/
http://iw###andy.com/phpmyadmin/
http://iw###.com.ph/phpmyadmin/
http://iv#.si/phpmyadmin/
http://iw##i.su/phpmyadmin/
http://iw##r.be/phpmyadmin/
http://iw###xsuite.com/phpmyadmin/
http://iw###itnow.us/phpmyadmin/
http://iw##lgo.xyz/phpmyadmin/
http://iw##ica.eu/phpMyAdmin/
http://iw#.edu.pl/phpmyadmin/
http://iw###chem.com/phpmyadmin/
http://iw###sfly.com/phpmyadmin/
http://iw#####ndo-dental.jp/phpmyadmin/
http://iw###care.nl/phpmyadmin/
http://iw####opolska.pl/phpmyadmin/
http://iw##gs.be/pma/
http://iw###l.co.uk/phpmyadmin/
http://iw###ehair.com/phpMyAdmin/@root:root@123
http://iw######ilkandcookies.com/.tools/phpMyAdmin/current/
http://iw####dulrahman.com/pma/
http://iw##x.info/phpmyadmin/
http://iw##r.pl/phpmyadmin/
http://iw#####beacircle.com/.tools/phpMyAdmin/current/
http://iw#s.pl/phpmyadmin/
http://iw###tion.fr/phpmyadmin/
http://iw##4.pl/phpmyadmin/
http://iw#.hu/phpmyadmin/
http://iw#####-cityhall.com/phpMyAdmin/
http://iw##k.cz/phpMyAdmin/
http://17#.##1.14.125:8888/project/active via 17#.#21.14.125
http://17#.##1.14.125:8888/gw?wo########## via 17#.#21.14.125
http://17#.##1.14.125:8888/gw?wo############### via 17#.#21.14.125
http://iv###rship.org/phpmyadmin/
http://iw###ction.com/phpmyadmin/
http://iw####ction.info/phpmyadmin/
http://iw####lone.co.uk/phpmyadmin/
http://iw####-emil-art.com/phpmyadmin/
http://iw##iuk.me/phpmyadmin/
http://iw###free.pl/pma/
http://iw####ancakes.com/.tools/phpMyAdmin/current/
http://iw##sky.de/phpmyadmin/
http://iw##i.id/phpmyadmin/
http://iw#####tthinking.co.uk/phpmyadmin/
http://iw###rack.com/phpmyadmin/
http://iw###tion.com/phpmyadmin/
http://iv#####tkingwood.com/.tools/phpMyAdmin/current/
http://iw###tions.com/phpmyadmin/
http://iw####ergy-stars.ch/phpmyadmin/
http://iw####exterior.com/phpmyadmin/
http://iw###.com.pe/phpmyadmin/
http://iw###nload.com/phpMyAdmin/
http://iw##sa.com/phpMyAdmin/
http://iw#.ge/pma/
http://17#.##1.14.125:8888/bots/chkVersion?cu#################### via 17#.#21.14.125
http://iw###abeadj.com/pma/
http://iw###esdayi.com/phpmyadmin/
http://iw###kubiak.pl/phpmyadmin/
http://iw#i.ga/phpmyadmin/
http://iw###sedser.de/phpmyadmin/
http://iw##i.vn/pma/
http://ix##orm.com/phpmyadmin/
http://ix##v.uk/phpmyadmin/
http://ix####ap3000.com/phpmyadmin/
http://ix###byblik.com/phpmyadmin/
http://ix###lor.net/pma/
http://iw####i-shika.net/phpmyadmin/
http://iw##gs.be/phpMyAdmin/
http://iw####apaneros.net/phpmyadmin/
http://iw###glinka.com/pma/
http://ix######alholdingltd.com/dbadmin/
http://ix##o.info/phpmyadmin/
http://ix##er.com/phpmyadmin/
http://iw###2016.com/phpmyadmin/
http://iw###abeadj.com/phpMyAdmin/
http://iw###abeadj.com/phpmyadmin/
http://ix#o.pe/phpmyadmin/
http://iw###nuals.se/phpmyadmin/
http://ix#.me.uk/.tools/phpMyAdmin/current/
http://iw###kmita.pl/phpmyadmin/
http://iw##tz.fr/phpmyadmin/
http://iw###free.pl/phpmyadmin/
http://iw####subaru.com/phpmyadmin/
http://iw###d.com.mx/.tools/phpMyAdmin/current/
http://iz####amilczarek.pl/phpmyadmin/
http://iz####adoniec.com/phpmyadmin/
http://iw###-2018.org/phpmyadmin/
http://iw###-meble.pl/phpmyadmin/
http://iw###andy.com/pma/
http://iw####wisniewska.de/phpmyadmin/
http://iw####ielgosz.pl/phpmyadmin/
http://iw###szmyd.com/phpmyadmin/
http://iw###raining.de/phpmyadmin/
http://iw#####ndyman.com.au/pma/
http://iw##018.org/phpmyadmin/
http://iw####8vienna.org/phpmyadmin/
http://iw###inic.com/phpMyAdmin/
http://iw##.com/phpmyadmin/
http://iw###niring.net/phpmyadmin/
http://iw##s.pl/phpmyadmin/
http://iw###dison.com/.tools/phpMyAdmin/current/
http://iw##icz.pl/phpmyadmin/
http://iw###yoga.com/phpmyadmin/
http://iw##180.com/phpmyadmin/
http://iw###u.co.jp/phpMyAdmin/
http://iw####rojects.com/phpMyAdmin/
http://iw####hiana2124.com/phpMyAdmin/
http://iw####shouten.com/phpmyadmin/
http://iw####sfaculty.com/.tools/phpMyAdmin/current/
http://iw##sky.de/mysql/
http://iw###kmita.pl/pma/
http://iw###emes.net/phpmyadmin/
http://iy###esign.se/phpmyadmin/

HTTP POST requests

http://iw###l.co.uk/phpmyadmin//index.php
http://iw#####ndo-dental.jp/phpmyadmin//index.php
http://iw####resents.com/phpmyadmin//index.php
http://iw###andy.com/phpmyadmin//index.php
http://iw####exterior.com/phpmyadmin//index.php
http://ix##pc.com/phpmyadmin//index.php
http://iw###dison.com/.tools/phpMyAdmin/current//index.php
http://iw##i.vn/pma//index.php
http://iw#####-cityhall.com/phpMyAdmin//index.php
http://iw####rojects.com/phpMyAdmin//index.php
http://iw#####beacircle.com/.tools/phpMyAdmin/current//index.php
http://iw####dulrahman.com/phpmyadmin//index.php
http://iw###d.com.mx/.tools/phpMyAdmin/current//index.php
http://iw####ancakes.com/.tools/phpMyAdmin/current//index.php
http://iw###u.co.jp/phpMyAdmin//index.php
http://iw###abeadj.com/phpmyadmin//index.php
http://iw###abeadj.com/phpMyAdmin//index.php
http://iw###.com.ph/phpmyadmin//index.php
http://iw##180.com/phpmyadmin//index.php
http://iy####myonline.com/pma//index.php
http://iw###rack.com/phpmyadmin//index.php
http://iw##our.pl/phpmyadmin//index.php
http://iw###chem.com/phpmyadmin//index.php
http://iw###ehair.com/phpMyAdmin//index.php
http://iv#####tkingwood.com/.tools/phpMyAdmin/current//index.php
http://iw##ksol.pl/phpmyadmin//index.php
http://iw####dulrahman.com/pma//index.php
http://iw#i.ga/phpmyadmin//index.php
http://iy####myonline.com/phpMyAdmin//index.php
http://iw###.org.ua/phpmyadmin//index.php
http://iw##018.org/phpmyadmin//index.php
http://ix##pc.com/pma//index.php
http://iw###inic.com/phpMyAdmin//index.php
http://iw##ica.eu/phpMyAdmin//index.php
http://iw####sfaculty.com/.tools/phpMyAdmin/current//index.php
http://iw####8vienna.org/phpmyadmin//index.php
http://iw##i.vn/phpmyadmin//index.php
http://iw#####ordevents.com/phpMyAdmin//index.php
http://ix####studios.com/.tools/phpMyAdmin/current//index.php
http://iy###road.com/phpmyadmin//index.php
http://ix####rtland.org/.tools/phpMyAdmin/current//index.php
http://iw###niring.net/phpmyadmin//index.php
http://iw#####ndyman.com.au/pma//index.php
http://iw####odental.com/phpmyadmin//index.php
http://iw##u.me/phpMyAdmin//index.php
http://iw###free.pl/phpmyadmin//index.php
http://iw#.co.jp/phpMyAdmin//index.php
http://iw###et.info/phpmyadmin//index.php
http://iw##tor.com/phpmyadmin//index.php
http://ix###laby.com/.tools/phpMyAdmin/current//index.php
http://iw##c.org/phpmyadmin//index.php
http://iw###abeadj.com/pma//index.php
http://iw######ilkandcookies.com/.tools/phpMyAdmin/current//index.php
http://iw####subaru.com/phpmyadmin//index.php
http://iw###2016.com/phpmyadmin//index.php
http://iw###smart2.org/phpmyadmin//index.php
http://ix##orer.is/phpmyadmin//index.php
http://iw##gs.be/pma//index.php
http://iw##gs.be/phpMyAdmin//index.php
http://iw####i-shika.net/phpmyadmin//index.php
http://iw####odental.com/phpMyAdmin//index.php
http://iw#####thdumbasses.com/.tools/phpMyAdmin/current//index.php
http://iw####supply.com/phpmyadmin//index.php
http://ix##ro.com/phpmyadmin//index.php
http://ix#.me.uk/.tools/phpMyAdmin/current//index.php
http://iw####hiana2124.com/phpMyAdmin//index.php
http://iy##a.co.th/phpmyadmin//index.php
http://iw###rea.com/mysql//index.php
http://iw####shouten.com/phpmyadmin//index.php
http://ix##age.com/phpmyadmin//index.php
http://iw##ksol.pl/phpMyAdmin//index.php
http://iw###andy.com/pma//index.php
http://iw##s.pl/phpmyadmin//index.php
http://iw###emes.net/phpmyadmin//index.php
http://iw#####tthinking.co.uk/phpmyadmin//index.php
http://iw###-2018.org/phpmyadmin//index.php
http://ix##orm.com/phpmyadmin//index.php
http://iw###tions.com/phpmyadmin//index.php
http://iw###nload.com/phpMyAdmin//index.php
http://iw###free.pl/pma//index.php
http://iw##k.cz/phpMyAdmin//index.php
http://iw###yoga.com/phpmyadmin//index.php
http://ix###byblik.com/phpmyadmin//index.php
http://iw##i.su/phpmyadmin//index.php
http://iw###care.nl/phpmyadmin//index.php
http://iw##sky.de/mysql//index.php
http://ix####ap3000.com/phpmyadmin//index.php
http://iw###okami.com/phpMyAdmin//index.php
http://iw##.com/phpmyadmin//index.php
http://iw##sa.com/phpMyAdmin//index.php
http://iw##r.pl/phpmyadmin//index.php
http://iw###ction.com/phpmyadmin//index.php
http://iw###kubiak.pl/phpmyadmin//index.php
http://iw#s.pl/phpmyadmin//index.php
http://iw####opolska.pl/phpmyadmin//index.php
http://iw####ction.info/phpmyadmin//index.php
http://iw##sky.de/phpmyadmin//index.php
http://iw####ergy-stars.ch/phpmyadmin//index.php
http://iw###tion.com/phpmyadmin//index.php
http://iw####lone.co.uk/phpmyadmin//index.php
http://iw##4.pl/phpmyadmin//index.php
http://iw###tion.fr/phpmyadmin//index.php
http://iw####ielgosz.pl/phpmyadmin//index.php
http://iv###rship.org/phpmyadmin//index.php
http://iw####-emil-art.com/phpmyadmin//index.php
http://ix##pgh.org/.tools/phpMyAdmin/current//index.php
http://iw###sfly.com/phpmyadmin//index.php
http://iw###sedser.de/phpmyadmin//index.php
http://iw###wood.pl/phpmyadmin//index.php
http://ix##4k.com/phpmyadmin//index.php
http://iw##lgo.xyz/phpmyadmin//index.php
http://ix###lor.net/pma//index.php
http://iw###kmita.pl/phpmyadmin//index.php
http://ix##er.com/phpmyadmin//index.php
http://iw##icz.pl/phpmyadmin//index.php
http://iw###free.pl/phpMyAdmin//index.php
http://ix##ng.tk/phpMyAdmin//index.php
http://ix###lor.net/phpmyadmin//index.php
http://iw###nuals.se/phpmyadmin//index.php
http://iw#.ge/pma//index.php
http://iw#.ge/phpMyAdmin//index.php
http://iw###szmyd.com/phpmyadmin//index.php
http://iw###xsuite.com/phpmyadmin//index.php
http://iw##iuk.me/phpmyadmin//index.php
http://ix#o.pe/phpmyadmin//index.php
http://iw###raining.de/phpmyadmin//index.php
http://ix##v.uk/phpmyadmin//index.php
http://iw###glinka.com/pma//index.php
http://iw###-meble.pl/phpmyadmin//index.php
http://iw###.com.pe/phpmyadmin//index.php
http://iw#.edu.pl/phpmyadmin//index.php
http://iv#.si/phpmyadmin//index.php
http://ix##.com/phpmyadmin//index.php
http://ix###orm.com/phpmyadmin//index.php
http://ix######alholdingltd.com/dbadmin//index.php
http://iw###kmita.pl/pma//index.php
http://ix##o.info/phpmyadmin//index.php
http://iw##x.info/phpmyadmin//index.php
http://iw##tz.fr/phpmyadmin//index.php
http://iw##r.be/phpmyadmin//index.php
http://iw#.hu/phpmyadmin//index.php
http://iw####oupeace.com/phpMyAdmin//index.php

's2#.#bpma.pl':443

'iw###ehair.com':443

UDP

DNS ASK iv####guebdg.com
DNS ASK ix##i.com
DNS ASK iy####myonline.com
DNS ASK iy##a.co.th
DNS ASK iw####resents.com
DNS ASK iw###.org.ua
DNS ASK iy###road.com
DNS ASK iy####-aijin.net
DNS ASK s2#.#bpma.pl
DNS ASK es##inc.org
DNS ASK iy###ilady.net
DNS ASK iy####menseste.net
DNS ASK iy###ispa.com
DNS ASK iy####randpart.com
DNS ASK iy###icin.com
DNS ASK iy###arjooga.fi
DNS ASK iy###ogo.com
DNS ASK iy##ive.net
DNS ASK iy#.hu
DNS ASK iy###ryemek.com
DNS ASK iy####irgroup.com
DNS ASK iy####irticaret.com
DNS ASK iy######ermesajlarii.com
DNS ASK iy###berver.com
DNS ASK iy###geldin.com
DNS ASK iy##ig.org
DNS ASK iy###nekler.com
DNS ASK ix##4k.com
DNS ASK iy##.org
DNS ASK ix##321.com
DNS ASK ix##orm.com
DNS ASK ix##ro.com
DNS ASK ix###laby.com
DNS ASK ix#.me.uk
DNS ASK ix##pgh.org
DNS ASK ix####rtland.org
DNS ASK ix##ra.com
DNS ASK ix##v.uk
DNS ASK ix#a.nl
DNS ASK ix###orm.com
DNS ASK ix####sabers.co.uk
DNS ASK ix######alholdingltd.com
DNS ASK ix###lor.net
DNS ASK ix##age.com
DNS ASK ix##er.com
DNS ASK ix###byblik.com
DNS ASK ix####ap3000.com
DNS ASK ix####studios.com
DNS ASK ix##pc.com
DNS ASK ix##ng.tk
DNS ASK ix#o.pe
DNS ASK ix##s.com
DNS ASK ix##o.info
DNS ASK iy####sushinsha.com
DNS ASK ix##.com
DNS ASK ix##orer.is
DNS ASK ix####nhillcup.la
DNS ASK ix##er.net
DNS ASK iz####adoniec.com
DNS ASK iz###llc.com
DNS ASK iy###esign.se
DNS ASK iz###shi.com
DNS ASK iz####endislik.com
DNS ASK iz###bianie.com
DNS ASK iz###ide.org
DNS ASK iz###ink.com
DNS ASK iz###izura.com
DNS ASK iz####berkah.com
DNS ASK iz##.##dzka.komornik.pl
DNS ASK iz##.tychy.pl
DNS ASK iz###tel.info
DNS ASK iz##ca.sk
DNS ASK iz###.com.pl
DNS ASK iz####center.com
DNS ASK iy###tirim.com
DNS ASK iz###ie.info
DNS ASK iz######tvo-riva.company.bg
DNS ASK iz####cyfryzjer.pl
DNS ASK iz##ko.com
DNS ASK iz##lta.com
DNS ASK iz##rovo.tk
DNS ASK iz###wezycie.eu
DNS ASK iz#.dk
DNS ASK iz####setriatlon.be
DNS ASK iz##t.nu
DNS ASK iz###roup.com
DNS ASK iz###rgije.si
DNS ASK iz###aeva.org
DNS ASK iw###-2018.org
DNS ASK iz###kowska.com
DNS ASK iz####adomanska.pl
DNS ASK iy##f.info
DNS ASK iy###ges.org
DNS ASK iy###nning.com
DNS ASK iy##i.de
DNS ASK iz##s.com
DNS ASK iz###magi.com
DNS ASK iz.#om.ua
DNS ASK iz##ph.eu
DNS ASK iz###la-bus.eu
DNS ASK iz##ela.xyz
DNS ASK iz#######rtnickaphotography.com
DNS ASK iz####abielicka.pl
DNS ASK iy##ez.com
DNS ASK iz#####designs.co.za
DNS ASK iz####akaminska.pl
DNS ASK iz####amilczarek.pl
DNS ASK iz####anowak.com
DNS ASK iz#####plociennik.pl
DNS ASK iz#####rabehanta.com
DNS ASK iz####lasimon.com
DNS ASK iz###llin.pl
DNS ASK iz#####sicologa.com.br
DNS ASK iz####nessbody.com
DNS ASK iz####a-real.com
DNS ASK iz###ech.com
DNS ASK iz#####erowanie.com.pl
DNS ASK iz##ea.pl
DNS ASK iz###eybesi.com
DNS ASK iw#u.me
DNS ASK iw##ksol.pl
DNS ASK iw##tz.fr
DNS ASK iw##i.id
DNS ASK iw###ntt.online
DNS ASK iw####i-shika.net
DNS ASK iw###.com.pe
DNS ASK iw#####tkayatuga.com
DNS ASK iw#####tthinking.co.uk
DNS ASK iw####exterior.com
DNS ASK iw#####ndo-dental.jp
DNS ASK iw####subaru.com
DNS ASK iw###2016.com
DNS ASK iw###okami.com
DNS ASK iw###tion.com
DNS ASK iw###nload.com
DNS ASK iw###tion.fr
DNS ASK iw####ppysmile.xyz
DNS ASK iw###tions.com
DNS ASK iw###.com.ph
DNS ASK iw###rack.com
DNS ASK iw####ergy-stars.ch
DNS ASK iw#.hu
DNS ASK iw###rea.com
DNS ASK iw####hiana2124.com
DNS ASK iw###dison.com
DNS ASK iw##k.cz
DNS ASK iw#.co.jp
DNS ASK iw#####beacircle.com
DNS ASK iw##our.pl
DNS ASK iw####ancakes.com
DNS ASK iw####shouten.com
DNS ASK iv#####tkingwood.com
DNS ASK iv####ercapital.com
DNS ASK iv###rship.org
DNS ASK iv#.si
DNS ASK iw###inic.com
DNS ASK iw###nuals.se
DNS ASK iw####ction.info
DNS ASK iw#.ge
DNS ASK iw####8vienna.org
DNS ASK iw###ction.com
DNS ASK iw###u.co.jp
DNS ASK iw##on.net
DNS ASK iw#####-cityhall.com
DNS ASK iw######ilkandcookies.com
DNS ASK iw###niring.net
DNS ASK iw####lone.co.uk
DNS ASK iw###free.pl
DNS ASK iw####odental.com
DNS ASK iw####dulrahman.com
DNS ASK iw####-emil-art.com
DNS ASK iw##iuk.me
DNS ASK iw###abeadj.com
DNS ASK iw##sky.de
DNS ASK iw###chem.com
DNS ASK iw###itnow.us
DNS ASK iw####apaneros.net
DNS ASK iw##tor.com
DNS ASK iw#####ndyman.com.au
DNS ASK iw###sedser.de
DNS ASK iw###andy.com
DNS ASK iw###glinka.com
DNS ASK iw###kmita.pl
DNS ASK iw###kubiak.pl
DNS ASK iw###szmyd.com
DNS ASK iw####urzanska.pl
DNS ASK iw####ielgosz.pl
DNS ASK iw###yoga.com
DNS ASK iw##icz.pl
DNS ASK iw##s.pl
DNS ASK iw###care.nl
DNS ASK iw###wood.pl
DNS ASK iw###worx.com
DNS ASK iw#####thdumbasses.com
DNS ASK iw###ehair.com
DNS ASK iw###d.com.mx
DNS ASK iw####supply.com
DNS ASK iw##c.org
DNS ASK iw###raining.de
DNS ASK iw#.co.th
DNS ASK iw###emes.net
DNS ASK iw###smart2.org
DNS ASK iw##.com
DNS ASK iw###et.info
DNS ASK iw##018.org
DNS ASK iw####sfaculty.com
DNS ASK iw##u.me
DNS ASK iw####wisniewska.de
DNS ASK iw#i.ga
DNS ASK iw##.org.pl
DNS ASK iw##lgo.xyz
DNS ASK iw##sa.com
DNS ASK iw##x.info
DNS ASK iw###esdayi.com
DNS ASK iw##ica.eu
DNS ASK iw##4.pl
DNS ASK iw##r.be
DNS ASK iw#####sulting.co.uk
DNS ASK iw####sappweb.co
DNS ASK iw###xsuite.com
DNS ASK iw####opolska.pl
DNS ASK iw##i.su
DNS ASK iw##i.vn
DNS ASK iw#.edu.pl
DNS ASK iw#####ordevents.com
DNS ASK iw######viveassociation.com
DNS ASK iw##180.com
DNS ASK iw##gs.be
DNS ASK iw###sfly.com
DNS ASK iw#s.pl
DNS ASK iw####rojects.com
DNS ASK iw####oupeace.com
DNS ASK iw#z.in
DNS ASK iw##.org
DNS ASK iw###l.co.uk
DNS ASK iw###-meble.pl
DNS ASK iw##r.pl
DNS ASK iw##z.com
DNS ASK iz####izakatek.pl

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\cmd.exe' /Q /C %LOCALAPPDATA%\Temp/s.bat' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /Q /C %LOCALAPPDATA%\Temp/s.bat

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial