Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003] 'LibraryPath' = 'mswsock.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000009] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000010] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000011] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000006] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000007] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000008] 'PackedCatalogItem' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\.i8042prt] 'ImagePath' = '\*'
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB27979$\4121336045\cfg.ini
- %WINDIR%\$NtUninstallKB27979$\4121336045\@
- %WINDIR%\$NtUninstallKB27979$\4121336045\Desktop.ini
- %WINDIR%\$NtUninstallKB27979$\4121336045\L\alehhooo
- '46.#2.235.2':34354
- '87.##0.85.48':34354
- '75.##.127.30':34354
- '18#.#76.22.196':34354
- '41.#42.7.41':34354
- '18#.#1.64.203':34354
- '71.##0.100.169':34354
- '18#.#3.27.33':34354
- '71.##.22.247':34354
- '12#.#42.46.35':34354
- '75.##6.62.230':34354
- '66.##3.35.87':34354
- '10#.#0.63.122':34354
- '68.##7.249.214':34354
- '74.##7.3.223':34354
- '68.##1.116.151':34354
- '17#.#2.109.193':34354
- '77.##2.51.229':34354
- '59.##8.49.146':34354
- '20#.#35.212.10':34354
- '19#.#89.26.25':34354
- '79.##7.79.139':34354
- '97.#2.54.27':34354
- '18#.116.3.3':34354
- '71.##2.161.103':34354
- '15#.#5.172.177':34354
- '18#.#84.199.160':34354
- '71.##7.27.148':34354
- '74.##.170.53':34354
- '17#.#25.233.20':34354
- '10#.#92.199.164':34354
- '68.##.208.204':34354
- '66.##.90.249':34354
- '95.#9.2.175':34354
- '81.##3.3.176':34354
- '11#.#09.246.73':34354
- '18#.#53.7.32':34354
- '77.##5.4.133':34354
- '24.##2.71.50':34354
- '64.##5.75.180':34354
- '76.##8.152.159':34354
- '41.##1.19.236':34354
- '67.##9.190.4':34354
- '75.##2.118.96':34354
- '98.##1.152.142':34354
- '17#.#6.198.40':34354
- '18#.#0.159.248':34354
- '97.##.58.176':34354
- '20#.#3.53.176':34354
- '17#.#3.30.169':34354
- '76.##6.203.188':34354
- '66.##7.231.66':34354
- '74.##.184.41':34354
- '17#.#96.1.118':34354
- '76.##3.32.38':34354
- '10#.#62.76.114':34354
- '78.##1.239.38':34354
- '24.##.233.177':34354
- '68.##3.125.240':34354
- 'localhost':80
- '75.##.225.61':34354
- '10#.#05.44.231':34354
- '69.#17.4.42':34354
- '76.##7.199.246':34354
- '76.##0.131.33':34354
- '98.##.39.224':34354
- '71.##.101.193':34354
- '83.##.116.135':34354
- '70.##5.230.119':34354
- '17#.#8.131.146':34354
- '18#.#5.83.105':34354
- '72.##3.15.63':34354
- '24.##.252.60':34354
- '74.##3.243.181':34354
- '76.##.109.40':34354
- '93.#6.10.50':34354
- '92.#1.4.125':34354
- '72.##0.236.26':34354
- '76.##7.205.33':34354
- '18#.#95.82.40':34354
- '10#.#0.47.242':34354
- '95.##2.234.42':34354
- '67.##.74.219':34354
- '67.##7.7.105':34354
- '68.##.71.120':34354
- '24.##.177.215':34354
- '75.##1.68.247':34354
- '18#.#8.223.162':34354
- '19#.#30.213.1':34354
- eg##kkid.cn/stat2.php?&a#################
- eg##kkid.cn/stat2.php?&a################
- ClassName: 'JDlkjdioUOUDuiod' WindowName: ''