Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = '<LS_APPDATA>\a72a1ac3\X'
- [<HKLM>\SYSTEM\ControlSet001\Services\a72a1ac3] 'ImagePath' = '%WINDIR%\3273271975:1490412860.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\.afd] 'ImagePath' = '\?'
- <LS_APPDATA>\a72a1ac3\X
- %WINDIR%\explorer.exe
- <SYSTEM32>\winlogon.exe
- %WINDIR%\Explorer.EXE
- %WINDIR%\$NtUninstallKB16918$\2804554435\L\acbrwqkz
- %WINDIR%\$NtUninstallKB16918$\2804554435\@
- %WINDIR%\3273271975:1490412860.exe
- <LS_APPDATA>\a72a1ac3\@
- <LS_APPDATA>\a72a1ac3\X
- '18#.#68.86.86':21810
- '89.##7.39.170':21810
- '67.##1.246.89':21810
- '12#.#38.125.40':21810
- '78.##.240.93':21810
- '94.##.187.209':21810
- '67.##5.254.85':21810
- '17#.#68.19.134':21810
- '78.##3.103.230':21810
- '19#.#1.187.93':21810
- '79.##3.195.228':21810
- '2.##.71.86':21810
- '31.##1.39.205':21810
- '11#.#4.101.26':21810
- '19#.#93.238.236':21810
- '21#.#35.164.20':21810
- '69.##2.80.249':21810
- '19#.#46.221.228':21810
- '95.#4.3.160':21810
- '18#.#55.52.54':21810
- '87.##6.20.35':21810
- '12#.#49.166.111':21810
- '24.#42.9.78':21810
- '19#.#8.115.236':21810
- '81.##3.188.241':21810
- '10#.#30.4.164':21810
- '82.#9.48.44':21810
- '82.#9.88.76':21810
- '95.##.50.104':21810
- '18#.#4.177.163':21810
- '89.##3.15.160':21810
- '22#.#83.67.222':21810
- '18#.#1.128.10':21810
- '20#.#15.78.221':21810
- '20#.#43.1.65':21810
- '12#.#23.98.179':21810
- '11#.#52.216.111':21810
- '19#.#07.139.246':21810
- '92.##.157.125':21810
- '18#.#73.196.195':21810
- '98.##2.94.43':21810
- '18#.#03.116.167':21810
- '19#.#62.50.42':21810
- '87.##0.138.68':21810
- '11#.#53.19.122':21810
- '18#.#5.215.3':21810
- '94.##.112.240':21810
- '21#.#73.46.204':21810
- '93.##6.80.144':21810
- '41.##1.3.154':21810
- '19#.#3.220.24':21810
- '79.##7.28.42':21810
- '11#.#04.26.171':21810
- '18#.#6.37.105':21810
- '19#.#07.172.246':21810
- '92.##.156.58':21810
- '11#.#9.55.73':21810
- '21#.#0.32.216':21810
- '85.#6.76.76':21810
- '77.##.92.142':21810
- '95.##4.225.203':21810
- '20#.#2.79.222':21810
- '85.##.134.228':21810
- '24.#7.85.0':21810
- '94.#9.18.66':21810
- '11#.#95.112.72':21810
- '89.##.148.56':21810
- '89.#7.38.35':21810
- '88.##2.37.89':21810
- '46.##9.178.170':21810
- '68.##.220.94':21810
- '13#.2.88.97':21810
- '18#.#43.46.106':21810
- '20#.#71.247.90':21810
- '77.##1.189.91':21810
- '11#.#8.35.170':21810
- '19#.#.49.237':21810
- '88.##7.50.107':21810
- '89.#3.76.95':21810
- '14.##5.124.145':21810
- '11#.#52.84.178':21810
- '18#.#6.167.3':21810
- '41.##4.68.117':21810
- '95.##.202.89':21810
- '11#.#2.18.241':21810
- '85.##9.135.213':21810
- '17#.#1.40.220':21810
- '14.##2.11.31':21810
- '18#.#1.102.208':21810
- '11#.#42.241.160':21810
- '14#.#3.197.165':21810
- '94.##6.215.99':21810
- '22#.#47.39.136':21810
- '21#.#1.46.134':21810
- '83.##.100.85':21810
- '86.##7.38.176':21810
- '11#.#67.58.9':21810
- '80.#.22.38':21810
- '82.##8.254.63':21810
- '81.##8.37.66':21810
- '68.##3.47.13':21810
- '46.##3.201.55':21810
- '18#.#2.136.17':21810
- '18#.#41.16.56':21810
- '11#.#17.158.133':21810
- '46.##.53.184':21810
- '93.##2.180.57':21810
- '17#.#26.131.71':21810
- '11#.#40.220.13':21810
- '93.##.198.56':21810
- '95.#8.46.3':21810
- '21#.#55.218.162':21810
- '95.##0.106.203':21810
- '19#.#01.5.35':21810
- '12#.#42.9.68':21810
- '24.##0.174.139':21810
- '79.##3.24.139':21810
- '12#.#33.63.62':21810
- '24.##.77.137':21810
- '11#.#13.92.56':21810
- '19#.#91.119.145':21810
- '19#.#91.56.186':21810
- '95.##.129.26':21810
- '11#.#32.78.88':21810
- '18#.#8.128.79':21810
- '93.#0.93.87':21810
- '46.##.52.177':21810
- '11#.#32.7.222':21810
- '77.##.119.68':21810
- '11#.#54.79.141':21810
- '85.##.225.207':21810
- '89.##5.194.205':21810
- '62.##7.193.205':21810
- '11#.#52.156.70':21810
- '46.##3.230.124':21810
- '19#.#4.254.170':21810
- '94.##.129.251':21810
- '10#.#22.91.206':21810
- '18#.#73.41.118':21810
- '89.##2.220.33':21810
- '2.##.237.227':21810
- '85.##5.118.43':21810
- '78.##.217.191':21810
- '12#.#80.136.4':21810
- '11#.#2.49.124':21810
- '11#.#4.16.186':21810
- '92.##.44.131':21810
- '24.##9.144.133':21810
- '19#.#1.26.138':21810
- '95.#9.1.225':21810
- '97.#8.41.50':21810
- '12#.#25.207.200':21810
- '2.###.164.127':21810
- '86.##.178.205':21810
- '10#.#31.1.131':21810
- '69.#7.76.98':21810
- '79.##6.14.110':21810
- '78.##8.181.85':21810
- '18#.#4.139.39':21810
- '21#.#81.215.29':21810
- '95.##0.104.198':21810
- '11#.#84.82.114':21810
- '10#.#0.205.174':21810
- '68.##2.133.50':21810
- '19#.#05.154.210':80
- '19#.#26.232.240':21810
- '14#.#6.49.20':21810
- '11#.#00.59.108':21810
- '94.##.123.147':21810
- '85.##.54.175':21810
- '19#.#9.236.99':21810
- '77.##4.165.227':21810
- '86.##1.101.6':21810
- '21#.#96.69.205':21810
- '11#.#02.83.97':21810
- '18#.#91.64.62':21810
- '59.#3.194.8':21810
- '14.##.157.78':21810
- '81.##5.181.186':21810
- '17#.#86.173.42':21810
- '78.##0.210.126':21810
- '11#.#86.112.141':21810
- '11#.#8.194.241':21810
- '20#.#1.155.199':21810
- '83.##9.127.24':21810
- '86.##4.108.214':21810
- '46.##6.74.220':21810
- '98.##6.22.147':21810
- '11#.#54.182.244':21810
- '94.##1.139.113':21810
- '67.##.76.175':21810
- '79.##7.63.39':21810
- '86.##2.23.80':21810
- '92.##4.121.134':21810
- '77.##4.93.179':21810
- '21#.#1.243.58':21810
- '46.##7.89.224':21810
- '19#.#6.21.110':21810
- '46.#51.3.75':21810
- '12#.#9.79.165':21810
- '17#.#6.159.92':21810
- '46.##.129.202':21810
- '14.##.214.179':21810
- '46.##1.186.2':21810
- '94.##0.217.184':21810
- '18#.#41.197.25':21810
- '18#.#34.110.85':21810
- '76.##.208.158':21810
- '59.##4.166.60':21810
- '11#.#41.80.204':21810
- '77.##3.179.63':21810
- '11#.#17.166.237':21810
- '20#.#8.199.159':21810
- '15#.#6.128.64':21810
- '11#.#93.192.64':21810
- '96.##.193.178':21810
- '87.##5.136.65':21810
- '46.##.83.222':21810
- '10#.#4.167.74':21810
- '11#.#41.139.192':21810
- '11#.#96.177.242':21810
- '18#.#68.40.75':21810
- '18#.#48.47.51':21810
- '86.##2.22.116':21810
- '14.##5.9.120':21810
- '18#.#.225.43':21810
- '17#.#2.148.48':21810
- '85.##.204.50':21810
- '89.##.166.183':21810
- '81.##8.146.33':21810
- '17#.#.98.197':21810
- '20#.#26.71.19':21810
- '59.#5.39.67':21810
- '95.##6.12.45':21810
- '10#.#21.155.80':21810
- '17#.#2.231.64':21810
- '20#.#13.176.114':21810
- '12#.#23.182.117':21810
- '11#.#4.73.207':21810
- '18#.#32.219.157':21810
- '4.###.163.248':21810
- '11#.#94.205.36':21810
- '10#.#10.113.196':21810
- '84.#.233.2':21810
- '79.##0.166.193':21810
- 19#.#05.154.210/stat2.php?w=##########################################
- 19#.#05.154.210/stat2.php?w=###########################################