Technical Information
- %WINDIR%\tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}.job
- <SYSTEM32>\tasks\{bbaeaeaf-1275-40e2-bd6c-bc8f88bd114a}
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1601' = '00000000'
- 'cr####formation.com':80
- http://cr####formation.com/
- http://www.cr####formation.com/
- DNS ASK hu##ng.com
- DNS ASK to#.com
- DNS ASK wa####gtonpost.com
- DNS ASK we###ndbars.com
- DNS ASK cr####formation.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''