Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\MSWindows] 'Start' = '00000002'
- '<SYSTEM32>\urdvxc.exe' /uninstallservice patch:<Full path to virus>
- '<SYSTEM32>\urdvxc.exe' /service
- '<SYSTEM32>\urdvxc.exe' /installservice
- '<SYSTEM32>\urdvxc.exe' /start
- '<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WER274b.dir00\svchost.exe.mdmp 16325836412032952
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- <SYSTEM32>\urdvxc.exe
- %TEMP%\WER274b.dir00\svchost.exe.mdmp
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- '21#.#3.181.33':139
- '21#.#3.82.166':139
- '21#.#3.6.218':139
- '21#.#3.37.14':139
- '21#.#3.118.170':139
- '21#.#3.167.156':9988
- '21#.#3.253.171':9988
- '21#.#3.19.21':9988
- '21#.#3.157.241':139
- '21#.#3.64.225':9988
- '21#.#3.164.224':139
- '21#.#3.149.110':139
- '21#.#3.211.100':139
- '21#.#3.120.135':139
- '21#.#3.134.106':139
- '21#.43.82.8':139
- '21#.#3.117.251':139
- '21#.#3.70.129':139
- '21#.#3.151.129':139
- '21#.#3.136.53':139
- '21#.#3.86.244':9988
- '21#.#3.141.28':9988
- '21#.#3.66.21':9988
- '21#.#3.218.109':9988
- '21#.#3.227.219':9988
- '21#.#3.136.192':9988
- '21#.#3.181.22':9988
- '21#.#3.15.71':9988
- '21#.#3.28.96':9988
- '21#.#3.79.227':9988
- '21#.#3.33.16':9988
- '21#.#3.167.122':9988
- '21#.#3.96.128':9988
- '21#.#3.102.107':9988
- '21#.#3.92.73':9988
- '21#.#3.18.227':9988
- '21#.#3.21.150':9988
- '21#.#3.17.134':9988
- '21#.#3.241.97':9988
- '21#.#3.85.190':9988
- '21#.#3.41.247':139
- '21#.#3.36.156':139
- '21#.#3.16.163':139
- '21#.#3.247.87':139
- '21#.#3.45.123':139
- '21#.#3.134.71':139
- '21#.#3.110.81':139
- '21#.#3.153.159':139
- '21#.#3.112.19':139
- '21#.#3.61.173':139
- '21#.#3.162.25':139
- '21#.#3.217.39':139
- '21#.#3.115.191':139
- '21#.#3.60.137':139
- '21#.#3.222.95':139
- '21#.#3.72.134':139
- '21#.#3.46.214':139
- '21#.#3.123.203':139
- '21#.#3.21.125':139
- '21#.#3.169.18':139
- '21#.#3.190.15':139
- '21#.#3.186.247':139
- '21#.#3.85.193':139
- '21#.#3.78.56':139
- '21#.#3.25.104':139
- '21#.#3.47.170':139
- '21#.#3.93.100':139
- '21#.#3.83.153':139
- '21#.#3.123.45':139
- '21#.#3.228.72':139
- '21#.#3.103.157':139
- '21#.#3.200.90':139
- '21#.#3.64.29':139
- '21#.#3.237.232':139
- '21#.#3.186.67':139
- '21#.#3.226.51':139
- '21#.#3.81.200':139
- '21#.#3.0.238':139
- '21#.#3.8.233':139
- '21#.#3.7.186':139
- '21#.#3.45.13':9988
- '21#.#3.51.75':445
- '21#.#3.183.230':445
- '21#.#3.4.207':445
- '21#.#3.74.170':445
- '21#.#3.92.73':445
- '21#.#3.237.33':445
- '21#.#3.228.16':445
- '21#.#3.85.190':445
- '21#.#3.171.113':445
- '21#.#3.215.212':445
- '21#.#3.241.97':445
- '21#.#3.18.227':445
- '21#.#3.47.120':445
- '21#.#3.253.138':445
- '21#.#3.23.200':445
- '21#.#3.79.227':445
- '21#.#3.144.176':445
- '21#.#3.86.244':445
- '21#.#3.247.84':445
- '21#.#3.171.21':445
- '21#.#3.21.150':445
- '21#.#3.66.21':445
- '21#.#3.18.17':445
- '21#.#3.6.183':445
- '21#.#3.51.229':445
- '21#.#3.122.34':445
- '21#.#3.60.142':445
- '21#.#3.227.110':445
- '21#.#3.54.54':445
- '21#.#3.233.160':445
- '21#.#3.92.100':445
- '21#.#3.168.123':445
- '21#.#3.53.27':445
- '21#.#3.43.35':445
- '21#.#3.87.137':445
- '21#.#3.251.162':445
- '21#.#3.184.190':445
- '21#.#3.19.21':445
- '21#.#3.5.170':445
- '21#.#3.167.122':445
- '21#.#3.206.234':9988
- '21#.#3.53.40':9988
- '21#.#3.54.130':9988
- '21#.#3.60.142':9988
- '21#.#3.151.56':9988
- '21#.#3.6.160':9988
- '21#.#3.9.160':9988
- '21#.#3.29.44':9988
- '21#.#3.124.224':9988
- '21#.#3.251.162':9988
- '21#.#3.104.17':9988
- '21#.#3.209.217':9988
- '21#.#3.61.190':9988
- '21#.#3.189.89':9988
- '21#.#3.87.137':9988
- '21#.#3.128.224':9988
- '21#.#3.196.174':9988
- '21#.#3.233.160':9988
- '21#.#3.50.115':9988
- '21#.#3.187.4':9988
- '21#.#3.166.123':445
- '21#.#3.233.56':445
- '21#.#3.101.98':445
- '21#.#3.109.145':445
- '21#.#3.119.211':445
- '21#.#3.227.71':445
- '21#.#3.29.119':445
- '21#.#3.121.247':445
- '21#.#3.223.38':445
- '21#.#3.29.33':445
- '21#.#3.11.135':445
- '21#.#3.102.107':445
- '21#.#3.15.108':445
- '21#.#3.78.51':9988
- '21#.#3.53.40':445
- '21#.#3.141.28':445
- '21#.#3.225.201':445
- '21#.#3.206.234':445
- '21#.#3.16.130':445
- '21#.#3.33.16':445
- '21#.#3.52.11':445
- '21#.#3.69.128':445
- '21#.#3.238.128':445
- '21#.#3.166.148':445
- '21#.#3.174.161':445
- '21#.#3.122.242':445
- '21#.#3.121.143':445
- '21#.#3.202.196':445
- '21#.#3.117.251':445
- '21#.#3.92.248':445
- '21#.#3.118.170':445
- '21#.#3.70.129':445
- '21#.#3.200.90':445
- '21#.#3.89.91':445
- '21#.#3.177.157':445
- '21#.#3.82.166':445
- '21#.#3.155.221':445
- '21#.#3.181.33':445
- '21#.#3.106.60':445
- '21#.#3.211.100':445
- '21#.#3.120.135':445
- '21#.#3.64.29':445
- '21#.#3.103.112':445
- '21#.#3.169.18':445
- '21#.#3.110.81':445
- '21#.#3.8.233':445
- '21#.#3.203.156':445
- '21#.#3.45.123':445
- '21#.#3.237.232':445
- '21#.#3.78.56':445
- '21#.#3.116.3':445
- '21#.#3.142.72':445
- '21#.#3.233.77':445
- '21#.#3.62.215':445
- '21#.#3.6.136':445
- '21#.#3.196.238':445
- '21#.#3.247.211':445
- '21#.#3.110.50':445
- '21#.#3.30.241':445
- '21#.#3.198.67':445
- '21#.#3.162.117':445
- '21#.#3.81.167':445
- '21#.#3.217.157':445
- '21#.#3.219.184':445
- '21#.#3.4.183':445
- '21#.#3.85.193':445
- '21#.#3.123.45':445
- '21#.#3.66.52':445
- '21#.#3.226.140':445
- '21#.#3.190.15':445
- '21#.#3.79.244':445
- '21#.#3.119.110':445
- '21#.#3.214.73':445
- '21#.#3.8.149':445
- '21#.#3.222.142':445
- '21#.#3.57.236':445
- '21#.#3.60.176':445
- '21#.#3.104.251':445
- '21#.#3.218.186':445
- '21#.#3.166.72':445
- '21#.#3.185.152':445
- '21#.#3.154.189':445
- '21#.#3.115.191':445
- '21#.#3.93.100':445
- '21#.#3.7.204':445
- '21#.#3.153.159':445
- '21#.#3.226.51':445
- '21#.#3.98.117':445
- '21#.#3.123.203':445
- '21#.#3.81.200':445
- '21#.#3.228.72':445
- '21#.#3.145.17':445
- '21#.#3.47.170':445
- '21#.#3.95.172':445
- '21#.#3.186.247':445
- '21#.#3.164.224':445
- '21#.#3.60.137':445
- '21#.#3.36.156':445
- '21#.#3.83.153':445
- '21#.#3.140.86':445
- '21#.#3.34.72':445
- '21#.#3.81.167':139
- '21#.#3.4.183':139
- '21#.#3.57.236':139
- '21#.#3.247.211':139
- '21#.#3.166.72':139
- '21#.#3.198.67':139
- '21#.#3.119.110':139
- '21#.#3.30.241':139
- '21#.#3.162.117':139
- '21#.#3.142.72':139
- '21#.#3.8.149':139
- '21#.#3.6.136':139
- '21#.#3.62.215':139
- '21#.#3.217.157':139
- '21#.#3.104.251':139
- '21#.#3.110.50':139
- '21#.#3.116.3':139
- '21#.#3.60.176':139
- '21#.#3.218.186':139
- '21#.#3.233.77':139
- '21#.#3.41.203':139
- '21#.#3.95.172':139
- '21#.#3.66.52':139
- '21#.#3.145.17':139
- '21#.#3.34.72':139
- '21#.#3.185.152':139
- '21#.#3.154.189':139
- '21#.#3.140.86':139
- '21#.#3.106.60':139
- '21#.#3.7.204':139
- '21#.#3.89.91':139
- '21#.#3.98.117':139
- '21#.#3.203.156':139
- '21#.#3.166.148':139
- '21#.#3.52.11':139
- '21#.#3.203.253':139
- '21#.#3.177.157':139
- '21#.#3.219.77':139
- '21#.#3.103.112':139
- '21#.#3.226.140':139
- '21#.#3.0.238':445
- '21#.#3.186.67':445
- '21#.#3.61.173':445
- '21#.#3.103.157':445
- '21#.#3.16.163':445
- '21#.#3.157.241':445
- '21#.#3.37.14':445
- '21#.#3.149.110':445
- '21#.#3.25.104':445
- '21#.#3.41.203':445
- '21#.#3.162.25':445
- '21#.#3.72.134':445
- '21#.#3.112.19':445
- '21#.#3.134.106':445
- '21#.#3.222.95':445
- '21#.#3.134.71':445
- '21#.#3.41.247':445
- '21#.#3.217.39':445
- '21#.#3.247.87':445
- '21#.#3.21.125':445
- '21#.#3.219.184':139
- '21#.#3.238.128':139
- '21#.#3.202.196':139
- '21#.#3.122.242':139
- '21#.#3.193.189':139
- '21#.#3.121.143':139
- '21#.#3.196.238':139
- '21#.#3.69.128':139
- '21#.#3.222.142':139
- '21#.#3.174.161':139
- '21#.#3.79.244':139
- '21#.#3.21.168':445
- '21#.#3.136.53':445
- '21#.#3.6.218':445
- '21#.43.82.8':445
- '21#.#3.234.92':445
- '21#.#3.92.248':139
- '21#.#3.214.73':139
- '21#.#3.72.56':139
- '21#.#3.155.221':139
- '21#.#3.254.208':445
- '21#.#3.53.239':139
- '21#.#3.45.103':139
- '21#.#3.17.150':139
- '21#.#3.241.97':139
- '21#.#3.139.147':139
- '21#.#3.253.171':139
- '21#.#3.227.71':139
- '21#.#3.121.247':139
- '21#.#3.121.57':139
- '21#.#3.47.120':139
- '21#.#3.88.101':139
- '21#.#3.223.38':139
- '21#.#3.24.162':139
- '21#.#3.101.98':139
- '21#.#3.187.4':139
- '21#.#3.23.200':139
- '21#.#3.181.22':139
- '21#.#3.199.69':139
- '21#.#3.29.33':139
- '21#.#3.167.156':139
- '21#.#3.192.253':139
- '21#.#3.92.73':139
- '21#.#3.249.198':139
- '21#.#3.130.217':139
- '21#.#3.107.180':139
- '21#.#3.171.21':139
- '21#.#3.86.244':139
- '21#.#3.247.84':139
- '21#.#3.97.135':139
- '21#.#3.75.51':139
- '21#.#3.17.107':139
- '21#.43.78.9':139
- '21#.#3.151.56':139
- '21#.#3.105.101':139
- '21#.#3.253.138':139
- '21#.#3.18.227':139
- '21#.#3.29.119':139
- '21#.#3.88.113':139
- '21#.#3.61.190':139
- '21#.#3.15.71':139
- '21#.#3.149.157':139
- '21#.#3.141.28':139
- '21#.#3.77.235':139
- '21#.#3.33.16':139
- '21#.#3.200.48':139
- '21#.#3.136.192':139
- '21#.#3.53.109':139
- '21#.#3.139.7':139
- '21#.43.4.19':139
- '21#.#3.225.201':139
- '21#.#3.28.96':139
- '21#.#3.13.213':139
- '21#.#3.64.225':139
- '21#.#3.184.26':139
- '21#.#3.101.43':139
- '21#.#3.44.72':139
- '21#.#3.146.9':139
- '21#.#3.206.234':139
- '21#.#3.102.107':139
- '21#.#3.16.130':139
- '21#.#3.154.223':139
- '21#.#3.99.60':139
- '21#.#3.234.27':139
- '21#.#3.75.164':139
- '21#.#3.119.211':139
- '21#.#3.233.56':139
- '21#.#3.191.215':139
- '21#.#3.157.147':139
- '21#.#3.128.224':139
- '21#.#3.166.123':139
- '21#.#3.124.224':139
- '21#.#3.33.237':139
- '21#.#3.236.61':139
- '21#.#3.226.17':139
- '21#.#3.45.13':139
- '21#.#3.18.145':139
- '21#.#3.96.128':139
- '21#.#3.19.135':139
- '21#.#3.109.145':139
- '21#.#3.20.63':139
- '21#.#3.218.109':139
- '21#.#3.59.96':139
- '21#.#3.18.17':139
- '21#.#3.5.239':139
- '21#.#3.155.90':139
- '21#.#3.251.162':139
- '21#.#3.17.134':139
- '21#.#3.208.209':139
- '21#.#3.23.88':139
- '21#.#3.104.17':139
- '21#.#3.92.193':139
- '21#.#3.245.17':139
- '21#.#3.21.225':139
- '21#.#3.231.63':139
- '21#.#3.53.27':139
- '21#.#3.6.160':139
- '21#.#3.43.35':139
- '21#.#3.227.208':139
- '21#.#3.237.33':139
- '21#.#3.29.44':139
- '21#.#3.209.217':139
- '21#.#3.160.245':139
- '21#.#3.236.3':139
- '21#.#3.68.253':139
- '21#.#3.66.21':139
- '21#.#3.233.160':139
- '21#.#3.19.21':139
- '21#.#3.161.46':139
- '21#.#3.129.153':139
- '21#.#3.11.12':139
- '21#.#3.184.190':139
- '21#.#3.54.54':139
- '21#.#3.228.16':139
- '21#.#3.87.137':139
- '21#.#3.78.78':139
- '21#.#3.9.160':139
- '21#.#3.6.183':139
- '21#.#3.51.229':139
- '21#.#3.21.150':139
- '21#.#3.168.123':139
- '21#.#3.167.122':139
- '21#.#3.98.252':139
- '21#.43.8.22':139
- '21#.#3.204.193':139
- '21#.#3.1.204':139
- '21#.#3.4.207':139
- '21#.#3.202.77':139
- '21#.#3.35.248':139
- '21#.#3.147.67':139
- '21#.#3.255.22':139
- '21#.#3.59.150':139
- '21#.#3.248.198':139
- '21#.#3.248.6':139
- '21#.#3.79.227':139
- '21#.#3.111.161':139
- '21#.#3.50.115':139
- '21#.#3.149.224':139
- '21#.#3.51.75':139
- '21#.#3.74.170':139
- '21#.#3.105.218':139
- '21#.#3.144.176':139
- '21#.#3.46.129':139
- '21#.#3.120.53':139
- '21#.43.6.52':139
- '21#.#3.171.113':139
- '21#.#3.92.100':139
- '21#.#3.39.199':139
- '21#.#3.20.216':139
- '21#.#3.61.83':139
- '21#.#3.87.44':139
- '21#.43.84.5':139
- '21#.#3.85.190':139
- '21#.#3.183.230':139
- '21#.#3.231.55':139
- '21#.#3.73.65':139
- '21#.#3.136.185':139
- '21#.#3.5.170':139
- '21#.#3.6.172':139
- '21#.#3.235.113':139
- '21#.#3.215.212':139
- '21#.#3.96.176':139
- '21#.#3.96.128':445
- '21#.#3.234.27':445
- '21#.#3.18.145':445
- '21#.#3.191.215':445
- '21#.#3.157.147':445
- '21#.#3.105.101':445
- '21#.#3.17.107':445
- '21#.#3.151.56':445
- '21#.#3.253.171':445
- '21#.43.78.9':445
- '21#.#3.88.101':445
- '21#.#3.19.135':445
- '21#.#3.187.4':445
- '21#.#3.146.9':445
- '21#.#3.24.162':445
- '21#.#3.75.164':445
- '21#.#3.128.224':445
- '21#.#3.99.60':445
- '21#.#3.154.223':445
- '21#.#3.167.156':445
- '21#.#3.105.218':445
- '21#.#3.111.161':445
- '21#.#3.97.135':445
- '21#.#3.218.109':445
- '21#.#3.75.51':445
- '21#.#3.130.217':445
- '21#.#3.107.180':445
- '21#.#3.248.6':445
- '21#.#3.248.198':445
- '21#.#3.50.115':445
- '21#.#3.53.239':445
- '21#.#3.15.71':445
- '21#.#3.181.22':445
- '21#.#3.88.113':445
- '21#.#3.199.69':445
- '21#.#3.121.57':445
- '21#.#3.61.190':445
- '21#.#3.45.103':445
- '21#.#3.139.147':445
- '21#.#3.17.150':445
- '21#.#3.9.112':445
- '21#.#3.10.58':445
- '21#.#3.213.131':445
- '21#.#3.182.7':445
- '21#.#3.189.89':445
- '21#.#3.101.43':445
- '21#.43.72.8':445
- '21#.#3.64.225':445
- '21#.#3.28.96':445
- '21#.#3.196.174':445
- '21#.#3.64.24':445
- '21#.#3.203.233':445
- '21#.#3.54.130':445
- '21#.#3.39.222':445
- '21#.#3.156.152':445
- '21#.#3.133.106':445
- '21#.#3.143.180':445
- '21#.#3.85.195':445
- '21#.#3.52.209':445
- '21#.#3.221.199':445
- '21#.43.4.19':445
- '21#.#3.226.17':445
- '21#.#3.200.48':445
- '21#.#3.136.192':445
- '21#.#3.44.72':445
- '21#.#3.124.224':445
- '21#.#3.33.237':445
- '21#.#3.45.13':445
- '21#.#3.236.61':445
- '21#.#3.53.109':445
- '21#.#3.116.175':445
- '21#.#3.139.198':445
- '21#.#3.235.86':445
- '21#.#3.227.219':445
- '21#.#3.184.26':445
- '21#.#3.149.157':445
- '21#.#3.20.63':445
- '21#.#3.77.235':445
- '21#.#3.13.213':445
- '21#.#3.139.7':445
- '21#.#3.249.198':445
- '21#.#3.60.142':139
- '21#.#3.85.195':139
- '21#.#3.53.40':139
- '21#.#3.142.192':445
- '21#.#3.254.208':139
- '21#.#3.15.108':139
- '21#.#3.227.110':139
- '21#.#3.78.51':139
- '21#.#3.133.106':139
- '21#.#3.182.7':139
- '21#.#3.23.88':445
- '21#.#3.5.239':445
- '21#.#3.17.134':445
- '21#.#3.155.90':445
- '21#.#3.227.208':445
- '21#.#3.78.51':445
- '21#.#3.142.192':139
- '21#.#3.59.96':445
- '21#.#3.9.160':445
- '21#.#3.104.17':445
- '21#.#3.116.175':139
- '21#.#3.196.174':139
- '21#.#3.10.58':139
- '21#.#3.213.131':139
- '21#.#3.235.86':139
- '21#.#3.11.135':139
- '21#.43.72.8':139
- '21#.#3.9.112':139
- '21#.#3.139.198':139
- '21#.#3.227.219':139
- '21#.#3.203.233':139
- '21#.#3.189.89':139
- '21#.#3.143.180':139
- '21#.#3.156.152':139
- '21#.#3.52.209':139
- '21#.#3.39.222':139
- '21#.#3.221.199':139
- '21#.#3.54.130':139
- '21#.#3.64.24':139
- '21#.#3.122.34':139
- '21#.#3.255.22':445
- '21#.#3.202.77':445
- '21#.#3.59.150':445
- '21#.#3.46.129':445
- '21#.43.8.22':445
- '21#.#3.68.253':445
- '21#.#3.78.78':445
- '21#.#3.73.65':445
- '21#.#3.35.248':445
- '21#.#3.231.55':445
- '21#.#3.149.224':445
- '21#.#3.147.67':445
- '21#.#3.1.204':445
- '21#.#3.192.253':445
- '21#.#3.204.193':445
- '21#.43.6.52':445
- '21#.#3.98.252':445
- '21#.#3.6.172':445
- '21#.#3.136.185':445
- '21#.#3.96.176':445
- '21#.#3.87.44':445
- '21#.#3.245.17':445
- '21#.#3.231.63':445
- '21#.#3.61.83':445
- '21#.#3.39.199':445
- '21#.#3.209.217':445
- '21#.#3.29.44':445
- '21#.#3.6.160':445
- '21#.#3.20.216':445
- '21#.#3.21.225':445
- '21#.#3.11.12':445
- '21#.#3.129.153':445
- '21#.#3.236.3':445
- '21#.#3.208.209':445
- '21#.#3.160.245':445
- '21#.#3.120.53':445
- '21#.#3.235.113':445
- '21#.43.84.5':445
- '21#.#3.161.46':445
- '21#.#3.92.193':445