Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\.ipsec] 'ImagePath' = '\?'
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB27979$\4121336045\@
- %WINDIR%\$NtUninstallKB27979$\4121336045\L\alehhooo
- %WINDIR%\$NtUninstallKB27979$\4121336045\Desktop.ini
- '18#.#72.204.122':80
- 'pr####.fling.com':80
- 18#.#72.204.122/count.php?id#######################
- 18#.#72.204.122/count.php?id########################
- pr####.fling.com/geo/txt/city.php
- 18#.#72.204.122/count.php?id######################
- DNS ASK ޡc#��G
- DNS ASK ޡc#�
- DNS ASK ޡc#x8g
- DNS ASK ޡc#�+
- DNS ASK ޡc#vC�
- DNS ASK ޡc#:rn
- DNS ASK ޡc#/�
- DNS ASK ޡc#�|
- DNS ASK pr####.fling.com
- DNS ASK ޡc#�P
- DNS ASK ޡc#]�
- DNS ASK ޡc#��N
- '17#.#98.93.213':16471
- '17#.#75.198.211':16471
- '18#.#5.214.112':16471
- '11#.#93.106.94':16471
- '98.##7.255.97':16471
- '69.##6.169.115':16471
- '66.##0.114.116':16471
- '18#.#36.145.114':16471
- '14.##.64.114':16471
- '17#.#9.223.209':16471
- '66.##0.110.216':16471
- '24.#28.5.72':16471
- '68.##.146.72':16471
- '10#.#87.57.70':16471
- '76.#0.5.70':16471
- '75.##6.190.220':16471
- '21#.#0.89.88':16471
- '71.##1.104.94':16471
- '24.##4.25.82':16471
- '20#.#09.166.73':16471
- '72.##0.174.76':16471
- '21#.#24.27.207':16471
- '20#.#02.25.194':16471
- '79.##2.177.140':16471
- '5.##.77.194':16471
- '59.##.240.131':16471
- '72.#.222.132':16471
- '17#.#77.24.192':16471
- '98.##2.16.192':16471
- '68.##.80.146':16471
- '20#.#6.53.145':16471
- '50.##.67.146':16471
- '24.##9.159.196':16471
- '85.##5.25.204':16471
- '18#.#0.174.121':16471
- '59.##5.80.120':16471
- '50.##2.203.206':16471
- '18#.#0.14.118':16471
- '98.##8.1.130':16471
- '18#.#62.52.131':16471
- '17#.#.196.126':16471
- '70.##.53.122':16471
- '11#.#09.21.126':16471
- '69.##7.111.254':16471
- '67.##1.36.254':16471
- '86.##5.255.255':16471
- '11#.#66.255.255':16471
- '21#.#61.255.255':16471
- '66.##.254.11':16471
- '68.##.175.20':16471
- '18#.#0.212.11':16471
- '18#.#57.214.249':16471
- '95.##8.21.243':16471
- '86.##1.255.255':16471
- '17#.#37.255.255':16471
- '0.###.255.255':16471
- '25#.#48.255.255':16471
- '25#.#54.255.255':16471
- '77.##4.255.255':16471
- '31.##6.255.255':16471
- '12#.#73.255.255':16471
- '85.##9.255.255':16471
- '11#.#94.255.255':16471
- '77.##3.255.255':16471
- '98.##6.57.21':16471
- '19#.1.16.60':16471
- '18#.#23.12.61':16471
- '71.##4.150.53':16471
- '19#.#11.73.226':16471
- '49.##5.123.43':16471
- '17#.#37.21.66':16471
- '50.#.216.66':16471
- '74.##7.159.65':16471
- '20#.#5.143.223':16471
- '42.#41.8.62':16471
- '17#.#9.97.43':16471
- '17#.#16.41.25':16471
- '83.##4.214.30':16471
- '12#.#5.50.23':16471
- '66.##9.148.21':16471
- '89.##.193.21':16471
- '17#.#68.181.35':16471
- '21#.#.186.35':16471
- '20#.#52.151.227':16471
- '96.##.174.33':16471
- '74.#8.78.35':16471