Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '<LS_APPDATA>\a72a1ac3\X'
- [<HKLM>\SYSTEM\ControlSet001\Services\a72a1ac3] 'ImagePath' = '%WINDIR%\3273271975:1490412860.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\.i8042prt] 'ImagePath' = '\?'
- <LS_APPDATA>\a72a1ac3\X
- %WINDIR%\explorer.exe
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB16918$\2804554435\L\acbrwqkz
- %WINDIR%\$NtUninstallKB16918$\2804554435\@
- %WINDIR%\3273271975:1490412860.exe
- <LS_APPDATA>\a72a1ac3\@
- <LS_APPDATA>\a72a1ac3\X
- '77.##5.112.22':21810
- '19#.#18.183.21':21810
- '75.##4.218.192':21810
- '71.##9.29.75':21810
- '62.##4.75.51':21810
- '18#.#8.127.59':21810
- '94.##1.74.242':21810
- '92.##.220.224':21810
- '89.##8.220.92':21810
- '79.##2.179.155':21810
- '70.##1.138.52':21810
- '18#.#60.56.52':21810
- '94.##0.0.209':21810
- '75.##.186.72':21810
- '18#.#54.164.60':21810
- '19#.#6.225.235':21810
- '93.##7.200.14':21810
- '94.##1.199.105':21810
- '20#.#14.119.143':21810
- '18#.#67.75.113':21810
- '81.##.167.125':21810
- '67.#30.2.31':21810
- '46.##9.182.22':21810
- '95.##8.157.12':21810
- '92.##4.46.101':21810
- '24.##.86.176':21810
- '11#.#98.174.117':21810
- '11#.#66.214.79':21810
- '10#.#29.21.141':21810
- '85.##3.110.72':21810
- '11#.#41.173.247':21810
- '10#.#7.122.168':21810
- '46.#51.82.4':21810
- '64.##.60.141':21810
- '12#.#84.23.41':21810
- '24.##.133.44':21810
- '95.##3.251.71':21810
- '10#.#84.13.234':21810
- '18#.#7.37.123':21810
- '87.##.86.169':21810
- '60.##.115.19':21810
- '17#.#67.90.175':21810
- '11#.#04.52.204':21810
- '10#.#2.172.254':21810
- '46.##3.221.200':21810
- '20#.#29.25.92':21810
- '58.##.72.201':21810
- '11#.#84.204.18':21810
- '71.##6.235.127':21810
- '46.##1.105.75':21810
- '64.#0.60.30':21810
- '71.##5.206.7':21810
- '93.##2.94.132':21810
- '18#.#60.34.49':21810
- '11#.#0.112.73':21810
- '14#.#34.4.97':21810
- '72.##0.141.41':21810
- '19#.#5.224.159':21810
- '11#.#54.85.145':21810
- '46.##5.37.248':21810
- '86.##.25.139':21810
- '10#.#07.113.206':21810
- '94.##1.230.89':21810
- '98.##4.146.157':21810
- '46.##.83.222':21810
- '12#.#2.148.244':21810
- '12#.#08.47.242':21810
- '18#.#15.178.21':21810
- '94.##.242.56':21810
- '80.##5.199.60':21810
- '86.##5.217.95':21810
- '46.##1.74.217':21810
- '46.##2.54.39':21810
- '19#.#40.224.70':21810
- '77.##4.25.109':21810
- '84.##6.130.168':21810
- '67.##6.253.116':21810
- '18#.#52.3.177':21810
- '69.##2.192.97':21810
- '19#.#0.248.130':21810
- '93.##7.165.49':21810
- '16#.#16.52.93':21810
- '46.##6.50.75':21810
- '10#.#91.140.78':21810
- '22#.#38.221.3':21810
- '31.##1.3.232':21810
- '12#.#5.98.32':21810
- '17#.8.225.9':21810
- '11#.#06.10.168':21810
- '94.##.187.149':21810
- '14.#9.55.99':21810
- '27.##7.161.70':21810
- '68.##9.136.253':21810
- '31.##3.125.18':21810
- '75.##.110.33':21810
- '1.##.90.224':21810
- '12#.#9.10.250':21810
- '18#.#32.45.99':21810
- '77.##.164.178':21810
- '31.##.160.170':21810
- '77.##.61.223':21810
- '12#.#01.8.85':21810
- '11#.#97.69.163':21810
- '14.##.166.229':21810
- '49.#.137.186':21810
- '18#.#60.63.141':21810
- '21#.#6.250.69':21810
- '21#.#38.16.177':21810
- '89.#79.28.8':21810
- '67.##2.223.43':21810
- '68.##5.129.220':21810
- '94.##.160.225':21810
- '77.##2.97.56':21810
- '75.##.184.59':21810
- '58.##6.27.182':21810
- '94.##.32.108':21810
- '94.##.204.197':21810
- '84.##9.46.178':21810
- '13#.#69.175.74':21810
- '59.##7.137.143':21810
- '46.##9.122.204':21810
- '95.#8.79.11':21810
- '96.#7.82.56':21810
- '10#.#7.140.3':21810
- '11#.#00.130.136':21810
- '24.##3.157.238':21810
- '11#.#41.59.123':21810
- '89.##.228.238':21810
- '46.##3.36.246':21810
- '49.##2.121.79':21810
- '24.##.102.48':21810
- '50.#.53.152':21810
- '11#.#06.82.45':21810
- '75.##7.67.10':21810
- '11#.#41.224.27':21810
- '11#.#84.86.2':21810
- '12#.#23.242.241':21810
- '18#.#60.48.83':21810
- '78.##3.140.79':21810
- '22#.#3.1.112':21810
- '86.##.142.15':21810
- '11#.#8.45.196':21810
- '14.##.85.248':21810
- '77.##.105.97':21810
- '75.##.98.150':21810
- '11#.#1.77.45':21810
- '46.#.32.110':21810
- '10#.#26.31.187':21810
- '95.##.188.139':21810
- '98.##.191.212':21810
- '69.##6.74.219':21810
- '19#.#05.135.219':21810
- '95.##8.57.42':21810
- '69.##0.212.137':21810
- '10#.#95.88.244':21810
- '12#.#9.29.66':21810
- '18#.#34.101.214':21810
- '11#.#30.193.177':21810
- '19#.#01.13.132':21810
- '10#.#91.91.115':21810
- '11#.#14.115.246':21810
- '92.##.21.174':21810
- '11#.#5.28.202':21810
- '31.##6.114.198':21810
- '19#.#18.183.153':21810
- '92.##9.229.117':21810
- '91.##5.36.189':21810
- '11#.#39.28.165':21810
- '2.##.100.199':21810
- '12#.#21.206.154':21810
- '79.##5.219.24':21810
- '19#.#05.154.210':80
- '46.#.111.29':21810
- '92.##.186.57':21810
- '12#.#38.124.147':21810
- '89.##8.180.23':21810
- '13#.#88.93.235':21810
- '85.##.222.54':21810
- '46.#.108.170':21810
- '46.##0.146.190':21810
- '19#.#44.242.32':21810
- '98.##.179.67':21810
- '95.##.29.143':21810
- '15#.#08.230.231':21810
- '11#.#94.35.22':21810
- '16#.#32.114.52':21810
- '72.##9.114.11':21810
- '18#.#34.88.62':21810
- '10#.#13.130.201':21810
- '17#.#06.98.53':21810
- '17#.#.124.65':21810
- '10#.#69.162.41':21810
- '11#.#40.149.223':21810
- '18#.#9.194.70':21810
- '79.##9.201.252':21810
- '72.##6.228.116':21810
- '89.##4.252.162':21810
- '11#.#04.217.239':21810
- '19#.#13.167.34':21810
- '89.##8.119.161':21810
- '46.#.152.51':21810
- '89.##5.81.110':21810
- '89.##9.149.5':21810
- '86.##2.37.204':21810
- '75.##4.6.241':21810
- '14.##5.158.127':21810
- '78.##.181.124':21810
- '11#.#18.185.194':21810
- '49.#.141.59':21810
- '12#.#9.21.250':21810
- '18#.#55.48.224':21810
- '11#.#7.247.171':21810
- '86.##2.171.67':21810
- '94.##2.236.108':21810
- '71.##7.173.38':21810
- '11#.#04.8.240':21810
- '11#.#7.160.6':21810
- '92.##.152.254':21810
- '18#.#91.109.44':21810
- '18#.#28.65.90':21810
- '18#.#60.39.178':21810
- '98.##2.90.197':21810
- '98.##2.173.148':21810
- '11#.#62.96.20':21810
- '78.##.75.122':21810
- '49.#.141.5':21810
- '79.##7.242.42':21810
- '11#.#19.187.13':21810
- '94.##0.115.134':21810
- '62.##.33.106':21810
- '62.#.159.214':21810
- '78.##2.158.110':21810
- '68.#.84.10':21810
- '75.##.111.252':21810
- '11#.#7.77.215':21810
- '10#.#27.127.155':21810
- '84.#6.243.2':21810
- '21#.#0.62.21':21810
- '88.##.176.82':21810
- '11#.#00.160.210':21810
- '18#.#6.106.16':21810
- '17#.#2.65.174':21810
- '82.##9.153.139':21810
- '89.##2.99.144':21810
- '12#.#38.236.43':21810
- '67.##3.19.211':21810
- '11#.#54.124.97':21810
- '17#.#63.70.48':21810
- '74.##4.225.246':21810
- '11#.#02.139.127':21810
- '20#.#7.114.196':21810
- '46.##7.19.34':21810
- '2.##.218.7':21810
- '12#.#10.59.38':21810
- '17#.#09.234.79':21810
- '11#.#41.61.53':21810
- '24.##7.49.199':21810
- 19#.#05.154.210/stat2.php?w=#########################################
- 19#.#05.154.210/stat2.php?w=##########################################