Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- 'localhost':80
- 'pr####.fling.com':80
- fo#####-counters.com/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK �c#��g
- DNS ASK �c# ��
- DNS ASK �c#r�
- DNS ASK �c#�=
- DNS ASK �c#Y|�
- DNS ASK �c#�U
- DNS ASK pr####.fling.com
- DNS ASK �c#,�W
- DNS ASK �c#��
- DNS ASK �c#Y��
- '67.##0.203.204':16471
- '75.##.221.99':16471
- '24.##5.227.96':16471
- '24.##0.106.207':16471
- '19#.#54.181.95':16471
- '66.##7.74.101':16471
- '18#.#1.13.110':16471
- '11#.#93.164.1':16471
- '17#.#2.134.107':16471
- '50.##.240.201':16471
- '18#.#0.192.201':16471
- '17#.#34.150.79':16471
- '12#.#20.198.80':16471
- '75.##8.231.220':16471
- '82.##4.166.221':16471
- '17#.#79.25.221':16471
- '71.#6.20.87':16471
- '11#.#4.37.210':16471
- '76.##6.175.208':16471
- '10#.#07.92.91':16471
- '71.##.141.89':16471
- '98.##0.78.91':16471
- '24.##9.42.200':16471
- '99.##.233.176':16471
- '88.##7.75.176':16471
- '19#.#8.170.177':16471
- '79.##.229.151':16471
- '70.##7.118.180':16471
- '76.##3.227.175':16471
- '75.##.205.164':16471
- '66.##.200.164':16471
- '98.##4.234.164':16471
- '18#.#52.78.171':16471
- '66.##8.87.168':16471
- '1.###.45.127':16471
- '72.##9.202.136':16471
- '24.##4.138.126':16471
- '61.##.220.199':16471
- '69.##5.197.121':16471
- '88.##6.176.195':16471
- '2.###.194.143':16471
- '20#.#5.29.186':16471
- '69.##3.12.188':16471
- '17#.#17.77.193':16471
- '31.#7.7.138':16471
- '71.##7.232.2':16471
- '22#.4.246.2':16471
- '79.##7.253.254':16471
- '20#.#47.253.254':16471
- '19#.#47.253.254':16471
- '24.#5.189.4':16471
- '74.##3.50.11':16471
- '17#.#08.20.15':16471
- '20#.#5.225.251':16471
- '20#.#42.33.6':16471
- '11#.#94.53.8':16471
- '27.##2.253.254':16471
- '98.##1.253.254':16471
- '79.##2.253.254':16471
- '88.##4.253.254':16471
- '18#.#53.253.254':16471
- '88.##1.253.254':16471
- '37.##9.253.254':16471
- '81.##8.253.254':16471
- '17#.#49.253.254':16471
- '18#.#50.253.254':16471
- '78.##0.253.254':16471
- '75.##2.197.248':16471
- '11#.#4.168.56':16471
- '96.##.212.61':16471
- '93.##8.201.49':16471
- '20#.#6.139.45':16471
- '69.##3.218.235':16471
- '50.#.216.66':16471
- '15#.#5.165.222':16471
- '93.#5.25.79':16471
- '14#.#96.23.79':16471
- '10#.#67.57.68':16471
- '67.##3.141.76':16471
- '98.##7.86.24':16471
- '76.##.211.244':16471
- '13#.#04.244.23':16471
- '75.##2.35.17':16471
- '20#.#16.236.17':16471
- '67.##9.25.25':16471
- '76.##9.73.39':16471
- '68.##4.227.40':16471
- '68.#.166.237':16471
- '69.##6.184.31':16471
- '79.##.143.32':16471