Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Tcpz-x86] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\winmgmt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\WapjSvc] 'Start' = '00000002'
- <SYSTEM32>\lib32wapj.exe
- <SYSTEM32>\dumprep.exe 1112 -dm 7 7 %TEMP%\WERdfd9.dir00\svchost.exe.mdmp 16325836412032364
- <SYSTEM32>\ping.exe -n 2 127.0.0.1
- C:\Tcpz-x86.sys
- <SYSTEM32>\lib32wapj.exe
- C:\Tcpz-x86.sys
- '9.###.240.97':445
- '9.###.240.98':445
- '9.###.240.96':445
- '9.###.240.94':1433
- '9.###.240.96':1433
- '9.###.240.100':445
- '9.###.240.99':445
- '9.###.240.95':1433
- '9.###.240.92':1433
- '9.###.240.89':1433
- '9.###.240.94':445
- '9.###.240.93':445
- '9.###.240.88':1433
- '9.###.240.90':1433
- '9.###.240.95':445
- '9.###.240.91':1433
- '9.###.240.93':1433
- '9.###.240.101':445
- '9.###.240.105':1433
- '9.###.240.102':1433
- '9.###.240.100':1433
- '9.###.240.107':445
- '9.###.240.109':445
- '9.###.240.104':1433
- '9.###.240.103':1433
- '9.###.240.108':445
- '9.###.240.106':445
- '9.###.240.98':1433
- '9.###.240.104':445
- '9.###.240.102':445
- '9.###.240.97':1433
- '9.###.240.99':1433
- '9.###.240.101':1433
- '9.###.240.103':445
- '9.###.240.105':445
- '9.###.240.92':445
- '9.###.240.74':1433
- '9.###.240.78':1433
- '9.###.240.75':1433
- '9.###.240.76':1433
- '9.###.240.81':445
- '9.###.240.82':445
- '9.###.240.77':1433
- '9.###.240.80':445
- '9.###.240.71':1433
- '9.###.240.70':1433
- '9.###.240.79':445
- '9.###.240.78':445
- '9.###.240.69':1433
- '9.###.240.73':1433
- '9.###.240.72':1433
- '9.###.240.66':1433
- '9.###.240.68':1433
- '9.###.240.79':1433
- '9.###.240.88':445
- '9.###.240.89':445
- '9.###.240.84':1433
- '9.###.240.85':1433
- '9.###.240.91':445
- '9.###.240.87':1433
- '9.###.240.86':1433
- '9.###.240.90':445
- '9.###.240.87':445
- '9.###.240.80':1433
- '9.###.240.81':1433
- '9.###.240.83':445
- '9.###.240.84':445
- '9.###.240.85':445
- '9.###.240.86':445
- '9.###.240.82':1433
- '9.###.240.83':1433
- '9.###.240.106':1433
- '9.###.240.129':1433
- '9.###.240.134':445
- '9.###.240.133':445
- '9.###.240.131':1433
- '9.###.240.135':445
- '9.###.240.133':1433
- '9.###.240.130':1433
- '9.###.240.132':1433
- '9.###.240.128':1433
- '9.###.240.129':445
- '9.###.240.130':445
- '9.###.240.122':1433
- '9.###.240.125':1433
- '9.###.240.126':1433
- '9.###.240.132':445
- '9.###.240.131':445
- '9.###.240.127':1433
- '9.###.240.134':1433
- '9.###.240.140':1433
- '9.###.240.142':445
- '9.###.240.140':445
- '9.###.240.141':445
- '9.###.240.143':445
- '9.###.240.143':1433
- '9.###.240.141':1433
- '9.###.240.142':1433
- '9.###.240.139':1433
- '9.###.240.136':1433
- '9.###.240.137':445
- '9.###.240.135':1433
- '9.###.240.136':445
- '9.###.240.139':445
- '9.###.240.138':1433
- '9.###.240.137':1433
- '9.###.240.138':445
- '9.###.240.128':445
- '9.###.240.111':1433
- '9.###.240.116':445
- '9.###.240.110':1433
- '9.###.240.115':445
- '9.###.240.117':445
- '9.###.240.118':445
- '9.###.240.113':1433
- '9.###.240.114':1433
- '9.###.240.112':1433
- '9.###.240.108':1433
- '9.###.240.107':1433
- '9.###.240.110':445
- '9.###.240.111':445
- '9.###.240.109':1433
- '9.###.240.114':445
- '9.###.240.112':445
- '9.###.240.113':445
- '9.###.240.115':1433
- '9.###.240.125':445
- '9.###.240.121':1433
- '9.###.240.123':445
- '9.###.240.124':445
- '9.###.240.124':1433
- '9.###.240.127':445
- '9.###.240.126':445
- '9.###.240.123':1433
- '9.###.240.120':1433
- '9.###.240.120':445
- '9.###.240.117':1433
- '9.###.240.116':1433
- '9.###.240.119':445
- '9.###.240.119':1433
- '9.###.240.122':445
- '9.###.240.121':445
- '9.###.240.118':1433
- '9.###.240.23':1433
- '9.###.240.26':445
- '9.###.240.25':445
- '9.###.240.21':1433
- '9.###.240.29':445
- '9.###.240.24':1433
- '9.###.240.27':445
- '9.###.240.28':445
- '9.###.240.22':1433
- '9.###.240.18':1433
- '9.###.240.22':445
- '9.###.240.17':1433
- '9.###.240.21':445
- '9.###.240.24':445
- '9.###.240.19':1433
- '9.###.240.23':445
- '9.###.240.20':1433
- '9.###.240.30':445
- '9.###.240.37':445
- '9.###.240.30':1433
- '9.###.240.35':445
- '9.###.240.36':445
- '9.###.240.38':445
- '9.###.240.40':445
- '9.###.240.32':1433
- '9.###.240.39':445
- '9.###.240.28':1433
- '9.###.240.32':445
- '9.###.240.33':445
- '9.###.240.31':445
- '9.###.240.25':1433
- '9.###.240.26':1433
- '9.###.240.29':1433
- '9.###.240.34':445
- '9.###.240.27':1433
- '9.###.240.16':1433
- '9.##5.240.7':445
- '9.##5.240.5':1433
- '9.##5.240.4':1433
- '9.##5.240.2':1433
- '9.##5.240.9':445
- '9.##5.240.8':1433
- '9.##5.240.8':445
- '9.##5.240.7':1433
- '9.##5.240.3':1433
- '9.##5.240.2':445
- '9.##5.240.3':445
- 'so##.into4.info':80
- 'bg###.in.into4.info':21
- '9.##5.240.6':445
- '9.##5.240.6':1433
- '9.##5.240.5':445
- '9.##5.240.4':445
- '9.###.240.10':445
- '9.###.240.17':445
- '9.###.240.14':1433
- '9.###.240.16':445
- '9.###.240.13':1433
- '9.###.240.19':445
- '9.###.240.20':445
- '9.###.240.18':445
- '9.###.240.15':1433
- '9.###.240.11':1433
- '9.###.240.12':445
- '9.###.240.13':445
- '9.##5.240.9':1433
- '9.###.240.11':445
- '9.###.240.14':445
- '9.###.240.15':445
- '9.###.240.10':1433
- '9.###.240.12':1433
- '9.###.240.34':1433
- '9.###.240.65':445
- '9.###.240.56':1433
- '9.###.240.63':445
- '9.###.240.64':445
- '9.###.240.59':1433
- '9.###.240.67':445
- '9.###.240.66':445
- '9.###.240.58':1433
- '9.###.240.55':1433
- '9.###.240.60':445
- '9.###.240.53':1433
- '9.###.240.51':1433
- '9.###.240.59':445
- '9.###.240.48':1433
- '9.###.240.54':1433
- '9.###.240.61':445
- '9.###.240.62':445
- '9.###.240.60':1433
- '9.###.240.74':445
- '9.###.240.75':445
- '9.###.240.72':445
- '9.###.240.73':445
- '9.###.240.77':445
- '9.###.240.67':1433
- '9.###.240.76':445
- '9.###.240.64':1433
- '9.###.240.62':1433
- '9.###.240.68':445
- '9.###.240.69':445
- '9.###.240.57':1433
- '9.###.240.61':1433
- '9.###.240.71':445
- '9.###.240.65':1433
- '9.###.240.63':1433
- '9.###.240.70':445
- '9.###.240.47':1433
- '9.###.240.39':1433
- '9.###.240.47':445
- '9.###.240.46':445
- '9.###.240.36':1433
- '9.###.240.49':445
- '9.###.240.38':1433
- '9.###.240.40':1433
- '9.###.240.48':445
- '9.###.240.45':445
- '9.###.240.42':445
- '9.###.240.43':445
- '9.###.240.31':1433
- '9.###.240.41':445
- '9.###.240.35':1433
- '9.###.240.37':1433
- '9.###.240.33':1433
- '9.###.240.44':445
- '9.###.240.41':1433
- '9.###.240.57':445
- '9.###.240.58':445
- '9.###.240.46':1433
- '9.###.240.56':445
- '9.###.240.50':1433
- '9.###.240.52':1433
- '9.###.240.45':1433
- '9.###.240.49':1433
- '9.###.240.43':1433
- '9.###.240.52':445
- '9.###.240.42':1433
- '9.###.240.50':445
- '9.###.240.51':445
- '9.###.240.55':445
- '9.###.240.44':1433
- '9.###.240.53':445
- '9.###.240.54':445
- so##.into4.info/history/list.asp
- so##.into4.info/it.asp?in########
- DNS ASK wp#d
- DNS ASK cc.##to4.info
- DNS ASK pr####s.into4.info
- DNS ASK www.google.com
- DNS ASK so##.into4.info
- DNS ASK bg###.in.into4.info