Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- 'localhost':80
- fo#####-counters.com/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- DNS ASK ܡc#p/
- DNS ASK ܡc#Qo
- DNS ASK ܡc#�G]
- DNS ASK ܡc#[�
- DNS ASK ܡc#ʜ
- DNS ASK ܡc#9�
- DNS ASK pr####.fling.com
- DNS ASK ܡc#�$
- DNS ASK ܡc#[�
- DNS ASK ܡc#�d
- '61.##2.64.11':16471
- '65.##.53.206':16471
- '24.##1.151.206':16471
- '21#.#0.71.208':16471
- '79.##6.24.207':16471
- '24.##1.75.11':16471
- '10#.#02.139.196':16471
- '79.##.242.17':16471
- '19#.#89.47.16':16471
- '74.##.127.13':16471
- '66.##1.121.15':16471
- '74.##.34.219':16471
- '69.##6.206.3':16471
- '95.##9.106.1':16471
- '88.##2.211.222':16471
- '75.##.118.222':16471
- '67.##6.182.8':16471
- '97.##.64.210':16471
- '84.##.244.208':16471
- '98.##0.46.11':16471
- '67.#4.66.9':16471
- '74.#38.76.9':16471
- '68.##.230.25':16471
- '69.##.112.179':16471
- '46.##9.31.180':16471
- '10#.#5.138.182':16471
- '72.##0.60.181':16471
- '41.##.85.179':16471
- '11#.#54.62.27':16471
- '50.##.180.30':16471
- '17#.#.206.176':16471
- '78.##3.200.26':16471
- '79.##8.234.176':16471
- '71.##9.118.21':16471
- '18#.2.32.22':16471
- '93.##2.53.20':16471
- '67.##2.186.18':16471
- '18#.#4.164.19':16471
- '24.##.236.186':16471
- '18#.#99.160.25':16471
- '86.##.179.25':16471
- '20#.#20.28.24':16471
- '92.##4.152.23':16471
- '98.##.165.23':16471
- '22#.#44.253.254':16471
- '18#.#82.199.248':16471
- '94.##5.253.254':16471
- '46.##6.253.254':16471
- '10#.#45.253.254':16471
- '17#.#01.127.248':16471
- '17#.#02.40.246':16471
- '78.##8.50.245':16471
- '12#.#00.137.246':16471
- '94.##.122.247':16471
- '67.##6.214.246':16471
- '88.##1.253.254':16471
- '78.##0.253.254':16471
- '98.##1.253.254':16471
- '79.##2.253.254':16471
- '27.##2.253.254':16471
- '81.##8.253.254':16471
- '16#.#46.253.254':16471
- '95.##6.253.254':16471
- '18#.#46.253.254':16471
- '20#.#47.253.254':16471
- '79.##7.253.254':16471
- '85.##6.85.233':16471
- '68.##.181.232':16471
- '18#.#7.130.235':16471
- '71.##.36.236':16471
- '68.##6.4.236':16471
- '2.###.146.232':16471
- '66.##.234.224':16471
- '22#.#05.80.223':16471
- '96.##.241.224':16471
- '64.##0.173.229':16471
- '24.##2.243.227':16471
- '78.##.159.242':16471
- '74.##3.215.241':16471
- '66.##.181.242':16471
- '98.##9.9.245':16471
- '10#.#7.13.244':16471
- '75.##1.234.240':16471
- '98.##4.82.237':16471
- '90.##9.142.236':16471
- '62.##4.8.238':16471
- '96.##.113.239':16471
- '77.##3.179.238':16471