Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Trillian' = '%ALLUSERSPROFILE%\tifnrrgp.exe'
- '%ALLUSERSPROFILE%\tifnrrgp.exe'
- %ALLUSERSPROFILE%\tifnrrgp.exe
- %ALLUSERSPROFILE%\tifnrrgp.exe
- 'ak##.w2c.ru':6911
- 'ko###s.w2c.ru':9967
- 'vz###x.w2c.ru':6805
- 'fi###austtv.com':9768
- 're####cesdaily.info':9548
- 'ap#.##pmania.com':80
- 'wp#d':80
- 'in###ttv.info':8539
- 're####cedaily.info':7973
- 'ne####eamtv.info':5485
- ap#.##pmania.com/
- wp#d/wpad.dat
- DNS ASK ak##.w2c.ru
- DNS ASK ko###s.w2c.ru
- DNS ASK vz###x.w2c.ru
- DNS ASK fi###austtv.com
- DNS ASK re####cesdaily.info
- DNS ASK ap#.##pmania.com
- DNS ASK wp#d
- DNS ASK in###ttv.info
- DNS ASK re####cedaily.info
- DNS ASK ne####eamtv.info