Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\MSWindows] 'Start' = '00000002'
- '<SYSTEM32>\urdvxc.exe' /service
- '<SYSTEM32>\urdvxc.exe' /uninstallservice patch:<Full path to virus>
- '<SYSTEM32>\urdvxc.exe' /installservice
- '<SYSTEM32>\urdvxc.exe' /start
- '<SYSTEM32>\dumprep.exe' 1148 -dm 7 7 %TEMP%\WERd038.dir00\svchost.exe.mdmp 16325836412032872
- <SYSTEM32>\urdvxc.exe
- '21#.#18.163.31':139
- '21#.#18.165.64':139
- '21#.#18.234.93':139
- '21#.#18.15.41':139
- '21#.#18.172.110':139
- '21#.#18.57.174':139
- '21#.#18.63.119':139
- '21#.#18.95.97':139
- '21#.#18.75.202':139
- '21#.#18.97.22':139
- '21#.#18.186.15':139
- '21#.#18.202.120':139
- '21#.#18.209.248':139
- '21#.#18.110.30':445
- '21#.#18.15.41':445
- '21#.#18.112.217':139
- '21#.#18.65.138':139
- '21#.#18.57.235':139
- '21#.#18.231.159':139
- '21#.#18.122.185':139
- '21#.#18.170.59':445
- '21#.#18.167.35':445
- '21#.#18.156.186':445
- '21#.#18.159.58':445
- '21#.#18.51.124':445
- '21#.#18.221.144':445
- '21#.#18.125.145':445
- '21#.#18.55.34':445
- '21#.#18.56.185':445
- '21#.#18.45.218':445
- '21#.#18.108.88':445
- '21#.#18.235.219':139
- '21#.#18.76.37':139
- '21#.#18.25.84':139
- '21#.#18.8.133':139
- '21#.#18.72.4':139
- '21#.#18.153.177':139
- '21#.#18.110.30':139
- '21#.#18.15.167':139
- '21#.#18.4.63':139
- '21#.#18.146.207':139
- '21#.#18.15.167':445
- '21#.#18.144.65':139
- '21#.#18.62.102':139
- '21#.#18.9.194':139
- '21#.#18.79.143':139
- '21#.#18.244.11':139
- '21#.#18.26.150':139
- '21#.#18.3.240':139
- '21#.#18.95.97':445
- '21#.#18.25.8':139
- '21#.#18.131.180':139
- '21#.#18.202.120':445
- '21#.#18.122.185':445
- '21#.#18.209.248':445
- '21#.#18.28.251':139
- '21#.#18.21.94':139
- '21#.#18.14.163':139
- '21#.#18.165.64':445
- '21#.#18.231.159':445
- '21#.#18.186.15':445
- '21#.#18.112.217':445
- '21#.#18.77.169':139
- '21#.#18.25.84':445
- '21#.#18.235.219':445
- '21#.#18.57.174':445
- '21#.#18.62.229':139
- '21#.#18.75.202':445
- '21#.#18.72.4':445
- '21#.#18.146.207':445
- '21#.#18.63.119':445
- '21#.#18.4.63':445
- '21#.#18.76.37':445
- '21#.#18.18.163':139
- '21#.#18.128.244':139
- '21#.#18.163.31':445
- '21#.#18.67.191':139
- '21#.#18.99.162':139
- '21#.#18.69.125':139
- '21#.#18.97.22':445
- '21#.#18.65.138':445
- '21#.#18.169.16':139
- '21#.#18.57.235':445
- '21#.#18.12.102':445
- '21#.#18.169.150':9988
- '21#.#18.88.87':139
- '21#.#18.106.133':139
- '21#.#18.40.68':445
- '21#.#18.154.88':139
- '21#.#18.203.51':139
- '21#.#18.51.77':139
- '21#.#18.129.53':139
- '21#.#18.253.199':139
- '21#.#18.103.139':139
- '21#.#18.88.87':445
- '21#.#18.154.88':445
- '21#.#18.129.53':445
- '21#.#18.48.37':139
- '21#.#18.57.57':139
- '21#.#18.51.77':445
- '21#.#18.148.142':445
- '21#.#18.77.236':445
- '21#.#18.106.133':445
- '21#.#18.203.51':445
- '21#.#18.77.236':139
- '21#.#18.61.85':445
- '21#.#18.188.13':445
- '21#.#18.155.238':445
- '21#.#18.18.217':445
- '21#.#18.168.196':445
- '21#.#18.74.122':445
- '21#.#18.234.125':445
- '21#.#18.234.86':445
- '21#.#18.183.38':445
- '21#.#18.34.8':445
- '21#.#18.19.37':445
- '21#.#18.167.202':445
- '21#.#18.101.128':445
- '21#.#18.40.68':139
- '21#.#18.148.142':139
- '21#.#18.249.69':445
- '21#.#18.1.204':445
- '21#.#18.172.169':445
- '21#.#18.139.254':445
- '21#.#18.26.19':445
- '21#.#18.7.251':139
- '21#.#18.221.144':139
- '21#.#18.151.36':139
- '21#.#18.108.88':139
- '21#.#18.51.124':139
- '21#.#18.56.185':139
- '21#.#18.159.58':139
- '21#.#18.62.199':445
- '21#.#18.156.186':139
- '21#.#18.45.218':139
- '21#.#18.21.13':139
- '21#.#18.140.238':445
- '21#.#18.174.237':445
- '21#.#18.238.25':445
- '21#.#18.242.224':445
- '21#.#18.58.60':445
- '21#.#18.170.59':139
- '21#.#18.154.11':139
- '21#.#18.196.7':445
- '21#.#18.115.36':445
- '21#.#18.208.28':445
- '21#.#18.167.35':139
- '21#.#18.212.114':139
- '21#.#18.115.36':139
- '21#.#18.9.94':139
- '21#.#18.63.218':445
- '21#.#18.48.37':445
- '21#.#18.196.7':139
- '21#.#18.63.218':139
- '21#.#18.19.42':139
- '21#.#18.208.28':139
- '21#.#18.9.75':139
- '21#.#18.242.224':139
- '21#.#18.179.4':139
- '21#.#18.55.34':139
- '21#.#18.125.145':139
- '21#.#18.12.102':139
- '21#.#18.174.237':139
- '21#.#18.7.251':445
- '21#.#18.58.60':139
- '21#.#18.238.25':139
- '21#.#18.140.238':139
- '21#.#18.98.215':445
- '21#.#18.221.74':445
- '21#.#18.15.138':445
- '21#.#18.89.196':445
- '21#.#18.101.94':445
- '21#.#18.131.239':445
- '21#.#18.88.208':445
- '21#.#18.232.146':445
- '21#.#18.10.249':445
- '21#.#18.158.168':445
- '21#.#18.21.22':445
- '21#.#18.210.17':445
- '21#.#18.212.79':445
- '21#.#18.188.109':445
- '21#.#18.122.212':445
- '21#.#18.155.138':445
- '21#.#18.111.228':445
- '21#.#18.132.30':445
- '21#.#18.153.216':445
- '21#.#18.149.7':445
- '21#.#18.33.127':445
- '21#.#18.173.42':445
- '21#.#18.33.127':139
- '21#.#18.157.71':139
- '21#.#18.19.158':139
- '21#.#18.40.238':139
- '21#.#18.87.57':139
- '21#.#18.180.18':139
- '21#.#18.19.126':139
- '21#.#18.102.140':139
- '21#.#18.46.96':139
- '21#.#18.46.193':139
- '21#.#18.244.11':445
- '21#.#18.87.86':445
- '21#.#18.5.232':445
- '21#.#18.134.245':445
- '21#.#18.70.93':445
- '21#.#18.18.163':445
- '21#.#18.59.221':445
- '21#.#18.28.251':445
- '21#.#18.184.112':445
- '21#.#18.11.69':445
- '21#.#18.113.66':445
- '21#.#18.157.71':445
- '21#.#18.210.128':445
- '21#.#18.49.19':445
- '21#.#18.35.88':445
- '21#.#18.40.238':445
- '21#.#18.46.96':445
- '21#.#18.159.48':445
- '21#.#18.150.86':445
- '21#.#18.122.95':445
- '21#.#18.133.213':139
- '21#.#18.205.5':139
- '21#.#18.186.136':139
- '21#.#18.3.25':139
- '21#.#18.126.125':139
- '21#.#18.156.20':445
- '21#.#18.87.57':445
- '21#.#18.249.68':445
- '21#.#18.150.163':139
- '21#.#18.86.212':445
- '21#.#18.46.88':445
- '21#.#18.3.247':445
- '21#.#18.135.161':445
- '21#.#18.24.5':445
- '21#.#18.114.146':445
- '21#.#18.234.43':445
- '21#.#18.1.157':445
- '21#.#18.45.95':445
- '21#.#18.158.128':445
- '21#.#18.19.126':445
- '21#.#18.180.18':445
- '21#.#18.46.193':445
- '21#.#18.187.190':445
- '21#.#18.151.112':445
- '21#.#18.1.246':445
- '21#.#18.113.156':445
- '21#.#18.162.113':445
- '21#.#18.114.14':445
- '21#.#18.59.77':445
- '21#.#18.128.70':445
- '21#.#18.102.140':445
- '21#.#18.113.156':139
- '21#.#18.144.65':445
- '21#.#18.111.228':139
- '21#.#18.114.146':139
- '21#.#18.153.216':139
- '21#.#18.9.194':445
- '21#.#18.221.74':139
- '21#.#18.149.7':139
- '21#.#18.15.138':139
- '21#.#18.89.196':139
- '21#.#18.98.215':139
- '21#.#18.133.125':139
- '21#.#18.128.244':445
- '21#.#18.246.173':139
- '21#.#18.155.138':139
- '21#.#18.99.162':445
- '21#.#18.210.128':139
- '21#.#18.135.161':139
- '21#.#18.131.239':139
- '21#.#18.88.208':139
- '21#.#18.249.68':139
- '21#.#18.24.5':139
- '21#.#18.14.163':445
- '21#.#18.69.125':445
- '21#.#18.122.95':139
- '21#.#18.114.14':139
- '21#.#18.59.77':139
- '21#.#18.79.62':139
- '21#.#18.173.42':139
- '21#.#18.70.93':139
- '21#.#18.184.112':139
- '21#.#18.59.221':139
- '21#.#18.233.137':139
- '21#.#18.101.94':139
- '21#.#18.49.19':139
- '21#.#18.158.168':139
- '21#.#18.10.249':139
- '21#.#18.3.240':445
- '21#.#18.194.40':139
- '21#.#18.232.146':139
- '21#.#18.156.20':139
- '21#.#18.35.88':139
- '21#.#18.26.150':445
- '21#.#18.109.135':139
- '21#.#18.25.8':445
- '21#.#18.20.54':139
- '21#.#18.131.180':445
- '21#.#18.187.190':139
- '21#.#18.45.95':139
- '21#.#18.162.113':139
- '21#.#18.1.157':139
- '21#.#18.97.214':139
- '21#.#18.132.30':139
- '21#.#18.159.48':139
- '21#.#18.34.124':139
- '21#.#18.235.80':139
- '21#.#18.113.66':139
- '21#.#18.208.187':139
- '21#.#18.67.191':445
- '21#.#18.62.102':445
- '21#.#18.148.94':139
- '21#.#18.150.86':139
- '21#.#18.86.212':139
- '21#.#18.158.128':139
- '21#.#18.21.94':445
- '21#.#18.46.88':139
- '21#.#18.169.16':445
- '21#.#18.77.169':445
- '21#.#18.21.22':139
- '21#.#18.122.212':139
- '21#.#18.134.245':139
- '21#.#18.3.247':139
- '21#.#18.127.1':139
- '21#.#18.234.43':139
- '21#.#18.62.229':445
- '21#.#18.1.246':139
- '21#.#18.212.79':139
- '21#.#18.11.69':139
- '21#.#18.188.109':139
- '21#.#18.151.112':139
- '21#.#18.79.143':445
- '21#.#18.128.70':139
- '21#.#18.5.232':139
- '21#.#18.210.17':139
- '21#.#18.141.189':9988
- '21#.#18.60.24':9988
- '21#.#18.44.106':9988
- '21#.#18.112.63':9988
- '21#.#18.66.53':9988
- '21#.#18.146.162':9988
- '21#.#18.64.1':9988
- '21#.#18.161.93':9988
- '21#.#18.53.165':9988
- '21#.#18.128.183':9988
- '21#.#18.66.152':139
- '21#.#18.53.243':9988
- '21#.#18.45.6':139
- '21#.#18.175.9':139
- '21#.#18.191.139':139
- '21#.#18.2.14':9988
- '21#.#18.128.129':9988
- '21#.#18.205.128':9988
- '21#.#18.28.73':9988
- '21#.#18.122.242':9988
- '21#.#18.50.63':9988
- '21#.#18.53.243':445
- '21#.#18.239.99':445
- '21#.#18.26.79':445
- '21#.#18.141.43':445
- '21#.#18.79.133':445
- '21#.#18.20.114':445
- '21#.#18.61.152':445
- '21#.#18.141.191':445
- '21#.#18.112.63':445
- '21#.#18.207.142':445
- '21#.#18.252.196':445
- '21#.#18.23.234':445
- '21#.#18.115.214':445
- '21#.#18.61.152':9988
- '21#.#18.38.39':9988
- '21#.#18.4.20':445
- '21#.#18.47.216':445
- '21#.#18.38.39':445
- '21#.#18.65.224':445
- '21#.#18.50.177':445
- '21#.#18.87.37':139
- '21#.#18.169.150':445
- '21#.#18.46.245':445
- '21#.#18.87.216':139
- '21#.#18.217.180':139
- '21#.#18.107.88':139
- '21#.#18.109.24':445
- '21#.#18.191.139':445
- '21#.#18.109.86':445
- '21#.#18.177.226':445
- '21#.#18.165.158':445
- '21#.#18.50.177':9988
- '21#.#18.242.83':139
- '21#.#18.141.43':9988
- '21#.#18.143.69':9988
- '21#.#18.20.114':9988
- '21#.#18.230.38':139
- '21#.#18.54.192':139
- '21#.#18.111.229':139
- '21#.#18.84.169':139
- '21#.#18.64.103':139
- '21#.#18.0.245':445
- '21#.#18.18.63':445
- '21#.#18.18.63':139
- '21#.#18.111.41':445
- '21#.#18.109.86':139
- '21#.#18.111.41':139
- '21#.#18.0.245':139
- '21#.#18.118.241':139
- '21#.#18.118.241':445
- '21#.#18.109.24':139
- '21#.#18.162.253':139
- '21#.#18.45.98':9988
- '21#.#18.169.150':139
- '21#.#18.66.152':445
- '21#.#18.87.37':445
- '21#.#18.162.253':445
- '21#.#18.185.108':139
- '21#.#18.185.108':445
- '21#.#18.165.158':139
- '21#.#18.46.245':139
- '21#.#18.177.226':139
- '21#.#18.114.53':445
- '21#.118.2.2':139
- '21#.#18.77.207':139
- '21#.#18.142.187':139
- '21#.#18.146.162':139
- '21#.#18.207.142':139
- '21#.#18.79.67':139
- '21#.#18.48.161':139
- '21#.#18.231.244':139
- '21#.#18.45.98':139
- '21#.#18.243.72':139
- '21#.#18.20.114':139
- '21#.#18.114.53':139
- '21#.#18.112.63':139
- '21#.#18.53.243':139
- '21#.#18.239.99':139
- '21#.#18.238.115':139
- '21#.#18.61.152':139
- '21#.#18.141.191':139
- '21#.#18.28.73':139
- '21#.#18.141.189':139
- '21#.#18.195.180':139
- '21#.#18.44.106':139
- '21#.#18.50.63':139
- '21#.#18.66.53':139
- '21#.#18.111.74':139
- '21#.#18.1.240':139
- '21#.#18.53.165':139
- '21#.#18.122.242':139
- '21#.#18.176.230':139
- '21#.#18.64.1':139
- '21#.#18.147.177':139
- '21#.#18.115.214':139
- '21#.#18.205.128':139
- '21#.#18.156.106':139
- '21#.#18.143.69':139
- '21#.#18.84.12':139
- '21#.#18.2.14':139
- '21#.#18.161.93':139
- '21#.#18.60.24':139
- '21#.#18.128.129':139
- '21#.#18.128.183':139
- '21#.#18.79.133':139
- '21#.#18.195.180':445
- '21#.#18.156.106':445
- '21#.#18.143.69':445
- '21#.#18.243.72':445
- '21#.#18.48.161':445
- '21#.#18.128.183':445
- '21#.#18.60.24':445
- '21#.#18.128.129':445
- '21#.#18.84.12':445
- '21#.#18.205.128':445
- '21#.#18.146.162':445
- '21#.#18.142.187':445
- '21#.#18.28.73':445
- '21#.#18.141.189':445
- '21#.#18.238.115':445
- '21#.#18.77.207':445
- '21#.#18.45.98':445
- '21#.118.2.2':445
- '21#.#18.231.244':445
- '21#.#18.79.67':445
- '21#.#18.2.14':445
- '21#.#18.65.224':139
- '21#.#18.50.177':139
- '21#.#18.23.234':139
- '21#.#18.64.1':445
- '21#.#18.252.196':139
- '21#.#18.141.43':139
- '21#.#18.26.79':139
- '21#.#18.47.216':139
- '21#.#18.38.39':139
- '21#.#18.4.20':139
- '21#.#18.66.53':445
- '21#.#18.44.106':445
- '21#.#18.1.240':445
- '21#.#18.161.93':445
- '21#.#18.111.74':445
- '21#.#18.122.242':445
- '21#.#18.147.177':445
- '21#.#18.176.230':445
- '21#.#18.50.63':445
- '21#.#18.53.165':445
- '21#.#18.29.36':445
- '21#.#18.90.50':139
- '21#.#18.24.198':445
- '21#.#18.206.236':445
- '21#.#18.100.88':139
- '21#.#18.48.86':139
- '21#.#18.115.0':445
- '21#.#18.29.46':139
- '21#.#18.75.171':139
- '21#.#18.34.64':139
- '21#.#18.75.171':445
- '21#.#18.82.205':139
- '21#.#18.59.15':139
- '21#.#18.107.71':139
- '21#.#18.207.62':139
- '21#.#18.29.46':445
- '21#.#18.45.171':139
- '21#.#18.34.64':445
- '21#.#18.202.27':139
- '21#.#18.31.217':445
- '21#.#18.51.56':139
- '21#.#18.98.243':139
- '21#.#18.245.244':139
- '21#.#18.85.31':139
- '21#.#18.20.86':445
- '21#.#18.236.28':139
- '21#.#18.214.136':445
- '21#.#18.32.214':445
- '21#.#18.119.145':139
- '21#.#18.23.92':139
- '21#.#18.209.58':445
- '21#.#18.20.86':139
- '21#.#18.69.155':139
- '21#.#18.29.36':139
- '21#.#18.53.194':139
- '21#.#18.24.198':139
- '21#.#18.4.181':139
- '21#.#18.190.20':139
- '21#.#18.151.98':139
- '21#.#18.85.31':445
- '21#.#18.115.0':139
- '21#.#18.31.217':139
- '21#.#18.155.238':139
- '21#.#18.234.86':139
- '21#.#18.4.66':139
- '21#.#18.18.217':139
- '21#.#18.168.196':139
- '21#.#18.188.13':139
- '21#.#18.142.234':139
- '21#.#18.61.85':139
- '21#.#18.34.8':139
- '21#.#18.83.11':139
- '21#.#18.1.204':139
- '21#.#18.167.202':139
- '21#.#18.139.254':139
- '21#.#18.148.189':445
- '21#.#18.55.213':445
- '21#.#18.26.19':139
- '21#.#18.101.128':139
- '21#.#18.249.69':139
- '21#.#18.172.169':139
- '21#.#18.19.37':139
- '21#.#18.183.38':139
- '21#.#18.236.28':445
- '21#.#18.98.243':445
- '21#.#18.190.20':445
- '21#.#18.90.50':445
- '21#.#18.4.181':445
- '21#.#18.206.236':139
- '21#.#18.82.205':445
- '21#.#18.119.145':445
- '21#.#18.245.244':445
- '21#.#18.23.92':445
- '21#.#18.234.125':139
- '21#.#18.207.62':445
- '21#.#18.55.213':139
- '21#.#18.74.122':139
- '21#.#18.148.189':139
- '21#.#18.202.27':445
- '21#.#18.107.71':445
- '21#.#18.45.171':445
- '21#.#18.59.15':445
- '21#.#18.48.86':445
- '21#.#18.89.253':445
- '21#.#18.53.131':445
- '21#.#18.235.77':445
- '21#.#18.27.140':445
- '21#.#18.186.41':445
- '21#.#18.33.142':445
- '21#.#18.55.234':139
- '21#.#18.158.126':445
- '21#.#18.171.239':445
- '21#.#18.177.116':445
- '21#.#18.217.177':445
- '21#.#18.158.90':139
- '21#.#18.71.148':139
- '21#.#18.204.72':139
- '21#.#18.76.205':139
- '21#.#18.235.146':139
- '21#.#18.51.37':445
- '21#.#18.22.102':445
- '21#.#18.0.96':445
- '21#.#18.247.161':445
- '21#.#18.54.211':445
- '21#.#18.247.161':139
- '21#.#18.55.234':445
- '21#.#18.230.38':445
- '21#.#18.217.177':139
- '21#.#18.235.77':139
- '21#.#18.177.116':139
- '21#.#18.242.83':445
- '21#.#18.217.180':445
- '21#.#18.64.103':445
- '21#.#18.84.169':445
- '21#.#18.111.229':445
- '21#.#18.22.102':139
- '21#.#18.33.142':139
- '21#.#18.0.96':139
- '21#.#18.51.37':139
- '21#.#18.54.211':139
- '21#.#18.53.131':139
- '21#.#18.158.126':139
- '21#.#18.171.239':139
- '21#.#18.186.41':139
- '21#.#18.27.140':139
- '21#.#18.12.181':139
- '21#.#18.32.214':139
- '21#.#18.214.136':139
- '21#.#18.59.32':445
- '21#.#18.122.155':445
- '21#.#18.59.32':139
- '21#.#18.6.26':139
- '21#.#18.72.207':139
- '21#.#18.171.32':139
- '21#.#18.226.168':139
- '21#.#18.57.12':139
- '21#.#18.6.26':445
- '21#.#18.7.197':445
- '21#.#18.72.207':445
- '21#.#18.171.32':445
- '21#.#18.57.12':445
- '21#.#18.253.245':445
- '21#.#18.49.93':445
- '21#.#18.194.54':445
- '21#.#18.32.131':445
- '21#.#18.46.46':445
- '21#.#18.136.243':139
- '21#.#18.21.224':445
- '21#.#18.21.224':139
- '21#.#18.71.148':445
- '21#.#18.235.146':445
- '21#.#18.204.72':445
- '21#.#18.171.232':139
- '21#.#18.3.94':139
- '21#.#18.122.155':139
- '21#.#18.49.93':139
- '21#.#18.165.248':139
- '21#.#18.129.220':139
- '21#.#18.46.46':139
- '21#.#18.32.131':139
- '21#.#18.7.197':139
- '21#.#18.89.253':139
- '21#.#18.12.181':445
- '21#.#18.76.205':445
- '21#.#18.171.232':445
- '21#.#18.194.54':139
- '21#.#18.253.245':139