Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '<LS_APPDATA>\a72a1ac3\X'
- [<HKLM>\SYSTEM\ControlSet001\Services\.ipsec] 'ImagePath' = '\?'
- <LS_APPDATA>\a72a1ac3\X
- %WINDIR%\Explorer.EXE
- <LS_APPDATA>\a72a1ac3\@
- <LS_APPDATA>\a72a1ac3\X
- %WINDIR%\$NtUninstallKB16918$\2804554435\L\acbrwqkz
- %WINDIR%\$NtUninstallKB16918$\2804554435\@
- '15#.#14.186.35':21810
- '58.##6.103.157':21810
- '90.##7.129.26':21810
- '67.##2.62.210':21810
- '82.#27.96.8':21810
- '95.##.120.176':21810
- '18#.#12.142.224':21810
- '13#.#93.128.62':21810
- '93.##2.167.1':21810
- '1.##.117.125':21810
- '12#.#4.207.217':21810
- '18#.#37.186.226':21810
- '17#.#8.223.1':21810
- '46.##.154.162':21810
- '4.##8.58.20':21810
- '46.##3.254.46':21810
- '17#.#22.41.99':21810
- '46.##4.216.37':21810
- '79.##6.32.203':21810
- '20#.#50.64.71':21810
- '89.##4.110.49':21810
- '77.##.236.26':21810
- '10.##9.97.122':21810
- '19#.#74.243.209':21810
- '81.##.154.58':21810
- '66.##.42.133':21810
- '18#.#60.15.127':21810
- '18#.#37.83.149':21810
- '18#.#95.130.169':21810
- '18#.#6.157.229':21810
- '18#.#8.118.67':21810
- '2.###.10.144':21810
- '10#.#94.125.116':21810
- '17#.#24.67.71':21810
- '92.##9.138.219':21810
- '79.##6.152.79':21810
- '87.##.95.189':21810
- '41.##0.133.107':21810
- '18#.#77.178.135':21810
- '94.##0.8.145':21810
- '19#.#41.211.75':21810
- '22#.#22.113.123':21810
- '78.##6.231.104':21810
- '39.##9.78.59':21810
- '18#.#4.4.130':21810
- '18#.#5.97.132':21810
- '19#.#8.223.76':21810
- '27.##5.200.75':21810
- '78.##.141.191':21810
- '85.#4.96.44':21810
- '82.##.140.191':21810
- '17#.#5.180.244':21810
- '15#.#4.20.78':21810
- '49.##0.153.186':21810
- '17#.#75.106.154':21810
- '10#.#29.183.25':21810
- '69.##7.17.39':21810
- '19#.#86.73.56':21810
- '85.##.54.107':21810
- '27.#.130.243':21810
- '18#.#5.227.236':21810
- '39.##3.43.112':21810
- '91.##6.184.182':21810
- '94.##.147.144':21810
- '11#.#00.149.96':21810
- '21#.#38.16.177':21810
- '82.##9.57.194':21810
- '11#.#34.179.35':21810
- '18#.#2.209.78':21810
- '11#.#02.9.116':21810
- '96.##.207.15':21810
- '17#.#9.42.163':21810
- '18#.#65.119.106':21810
- '61.##0.87.101':21810
- '11#.#3.158.120':21810
- '77.##1.11.237':21810
- '12#.#32.139.93':21810
- '18#.#73.77.199':21810
- '11#.#00.137.200':21810
- '85.#4.41.95':21810
- '79.##5.171.52':21810
- '70.##2.52.158':21810
- '18#.#72.16.157':21810
- '89.##3.15.221':21810
- '18#.#.168.239':21810
- '11#.#6.214.180':21810
- '85.##.84.119':21810
- '78.##7.93.168':21810
- '19#.#04.138.77':21810
- '88.#5.11.7':21810
- '11#.#41.46.51':21810
- '74.##.144.212':21810
- '79.##6.20.63':21810
- '93.##5.253.149':21810
- '10#.#05.164.173':21810
- '41.##.178.136':21810
- '17#.#04.166.35':21810
- '67.##1.83.47':21810
- '11#.#06.246.150':21810
- '11#.#24.194.5':21810
- '94.##2.22.231':21810
- '78.##.130.46':21810
- '12#.#23.96.189':21810
- '46.##.86.147':21810
- '59.##.143.196':21810
- '18#.#7.106.157':21810
- '14#.#61.166.191':21810
- '11#.#00.196.234':21810
- '11#.11.8.60':21810
- '11#.#51.244.50':21810
- '79.##4.50.27':21810
- '1.##.249.216':21810
- '46.#60.64.9':21810
- '20#.#.159.224':21810
- '19#.#6.90.38':21810
- '18#.#19.189.161':21810
- '20#.#79.27.185':21810
- '14.##0.162.76':21810
- '2.##7.5.128':21810
- '18#.#3.210.33':21810
- '20#.#64.108.176':21810
- '17#.#43.239.23':21810
- '64.##9.29.18':21810
- '12#.#12.111.137':21810
- '82.##.140.179':21810
- '92.##.159.200':21810
- '17#.#01.131.125':21810
- '22#.#6.69.201':21810
- '11#.#00.23.238':21810
- '11#.#43.219.44':21810
- '95.#8.52.90':21810
- '18#.#41.183.241':21810
- '68.##6.160.126':21810
- '11#.#40.17.111':21810
- '17#.#21.223.202':21810
- '18#.#35.170.207':21810
- '67.##6.152.252':21810
- '18#.#37.34.61':21810
- '41.##0.245.166':21810
- '21#.#2.205.66':21810
- '18#.#6.113.183':21810
- '59.##1.156.2':21810
- '79.##2.215.153':21810
- '17#.#76.230.86':21810
- '68.##.131.130':21810
- '94.#1.27.88':21810
- '78.##.251.40':21810
- '79.##8.180.8':21810
- '11#.#40.68.66':21810
- '62.#3.68.93':21810
- '83.##7.19.20':21810
- '11#.#00.161.147':21810
- '19#.#05.135.93':21810
- '27.#.129.190':21810
- '27.##4.29.138':21810
- '66.##.19.187':21810
- '21#.#75.83.234':21810
- '11#.#03.127.132':21810
- '19#.#38.190.92':21810
- '84.#.239.115':21810
- '92.##4.107.24':21810
- '79.##6.73.177':21810
- '69.##5.201.91':21810
- '17#.#9.171.103':21810
- '21#.#6.24.147':21810
- '10#.#7.166.47':21810
- '58.##.50.197':21810
- '68.#5.64.44':21810
- '19#.#7.79.191':21810
- '90.##3.59.229':21810
- '74.#95.74.8':21810
- '19#.#05.154.210':80
- '10#.#4.103.251':21810
- '84.##3.225.252':21810
- '11#.#7.42.167':21810
- '77.##.246.11':21810
- '74.##.152.39':21810
- '24.##4.251.217':21810
- '11#.#40.228.242':21810
- '11#.#54.9.219':21810
- '89.##6.110.234':21810
- '11#.#95.23.122':21810
- '95.#0.19.82':21810
- '11#.#48.193.187':21810
- '17#.#5.14.11':21810
- '91.##7.199.103':21810
- '18#.#.29.175':21810
- '75.##5.239.1':21810
- '76.##9.43.102':21810
- '12#.#18.53.47':21810
- '79.##9.242.10':21810
- '11#.#97.2.15':21810
- '72.##4.33.208':21810
- '89.##5.89.150':21810
- '20#.#4.187.230':21810
- '78.##.186.169':21810
- '79.##9.111.171':21810
- '66.#0.82.69':21810
- '10#.#97.86.247':21810
- '18#.#4.251.237':21810
- '68.##.189.27':21810
- '78.#.39.80':21810
- '93.##3.157.56':21810
- '18#.#60.8.53':21810
- '19#.#5.39.21':21810
- '14.##.253.153':21810
- '89.##3.235.168':21810
- '79.##6.78.93':21810
- '21#.#69.187.94':21810
- '18#.#3.61.186':21810
- '83.#.244.121':21810
- '89.##5.60.10':21810
- '11#.#19.244.120':21810
- '80.##1.192.123':21810
- '42.##1.136.186':21810
- '20#.#6.177.4':21810
- '85.##.116.31':21810
- '21#.#24.126.30':21810
- '68.##9.145.142':21810
- '12#.#83.220.85':21810
- '17#.#59.221.249':21810
- '91.##.253.81':21810
- '20#.#7.221.187':21810
- '17#.#0.163.248':21810
- '79.##5.71.70':21810
- '24.##.102.249':21810
- '20#.#79.2.71':21810
- '18#.#15.38.126':21810
- '21#.#97.142.188':21810
- '15#.#14.217.98':21810
- '18#.#60.0.44':21810
- '58.##2.30.191':21810
- '79.##4.201.241':21810
- '11#.#99.192.239':21810
- '18#.#05.233.246':21810
- '17#.#11.43.221':21810
- '94.##9.225.94':21810
- '84.#.221.4':21810
- '89.##5.145.151':21810
- '12#.#8.210.246':21810
- '95.##0.97.175':21810
- '95.##.95.204':21810
- '18#.#2.134.48':21810
- '17#.#0.64.238':21810
- '11#.#01.240.48':21810
- '20#.#7.117.240':21810
- '17#.#5.250.45':21810
- '58.##7.231.162':21810
- '76.##6.161.228':21810
- '70.##3.187.195':21810
- '92.#7.85.69':21810
- '10.##8.83.244':21810
- '41.##2.133.88':21810
- '12#.#20.93.12':21810
- '12#.#42.9.15':21810
- '19#.#06.27.22':21810
- '95.#1.51.8':21810
- 19#.#05.154.210/bad.php?w=#############################################
- 19#.#05.154.210/stat2.php?w=###########################################
- 19#.#05.154.210/stat2.php?w=##########################################