Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- <SYSTEM32>\cmd.exe
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- %WINDIR%\assembly\GAC\Desktop.ini
- C:\RECYCLER\S-1-5-18\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\@
- C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\$2ebe1c2e2a38cb36436c4d1cb8c2630c\n
- 'localhost':80
- 'pr####.fling.com':80
- fo#####-counters.com/5699145-24B8EBEDAA47374020E664A2406FB684/counter.img?th###############################
- pr####.fling.com/geo/txt/city.php
- DNS ASK ��#�]m
- DNS ASK ��#�B#
- DNS ASK ��#�05
- DNS ASK ��#���7
- DNS ASK ��#9
- DNS ASK ��#�K_
- DNS ASK pr####.fling.com
- DNS ASK ��#�nV]
- DNS ASK ��# �~*
- DNS ASK ��#��
- '17#.#23.27.154':16471
- '95.##6.45.155':16471
- '68.##0.228.208':16471
- '87.##1.131.213':16471
- '2.###.53.148':16471
- '17#.#6.245.155':16471
- '10#.#.118.203':16471
- '11#.#93.129.174':16471
- '31.##.75.171':16471
- '76.##.166.205':16471
- '11#.#3.73.171':16471
- '88.##0.16.224':16471
- '27.##1.241.132':16471
- '18#.#8.162.225':16471
- '86.##1.53.226':16471
- '99.##5.36.132':16471
- '94.##1.144.135':16471
- '98.##5.223.140':16471
- '21#.#9.112.14':16471
- '66.##1.222.217':16471
- '12#.#15.69.219':16471
- '17#.#1.3.219':16471
- '12#.#0.39.201':16471
- '50.##.153.187':16471
- '92.##7.218.198':16471
- '11#.#63.112.198':16471
- '68.##.176.193':16471
- '24.##.28.185':16471
- '39.##6.165.181':16471
- '72.##3.239.179':16471
- '12#.#24.204.202':16471
- '21#.#9.211.184':16471
- '75.##8.129.184':16471
- '68.##.229.200':16471
- '18#.#6.123.192':16471
- '61.##.47.188':16471
- '17#.#09.51.177':16471
- '71.##1.67.183':16471
- '24.##.200.193':16471
- '76.##.21.197':16471
- '31.##0.187.194':16471
- '12#.#32.108.195':16471
- '20#.#7.225.194':16471
- '68.##.139.195':16471
- '98.##.34.126':16471
- '59.#71.1.50':16471
- '81.##8.157.50':16471
- '12#.#91.0.50':16471
- '68.#6.67.40':16471
- '19#.#8.94.43':16471
- '21#.#25.140.52':16471
- '21#.#63.253.61':16471
- '24.##.181.63':16471
- '46.##2.71.61':16471
- '20#.#14.128.54':16471
- '17#.#13.67.57':16471
- '20#.#65.195.20':16471
- '12#.#2.182.27':16471
- '17#.#02.87.19':16471
- '67.##.106.16':16471
- '18#.88.2.18':16471
- '24.##7.80.32':16471
- '89.##.244.37':16471
- '70.##.249.37':16471
- '18#.3.63.35':16471
- '74.#7.67.34':16471
- '21#.#11.1.35':16471
- '92.##.189.113':16471
- '17#.#.34.115':16471
- '11#.#46.8.113':16471
- '76.##.147.105':16471
- '24.##.29.110':16471
- '71.##.32.118':16471
- '31.##.170.227':16471
- '98.##6.244.226':16471
- '89.##.201.123':16471
- '68.##.64.121':16471
- '19#.#88.18.122':16471
- '62.#8.61.89':16471
- '82.##1.89.94':16471
- '62.##.137.84':16471
- '50.#.216.66':16471
- '89.#8.18.81':16471
- '67.##3.28.239':16471
- '76.##6.58.237':16471
- '61.##0.49.98':16471
- '46.##0.12.97':16471
- '75.##6.105.96':16471
- '79.##7.169.96':16471