Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'engel' = '%APPDATA%\updates\updates.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\updates.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- <SYSTEM32>\netsh.exe advfirewall firewall add rule name="<Virus name>" dir=in action=allow program="<Full path to virus>"
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] 'LowRiskFileTypes' = '.exe'
- %APPDATA%\engel\updates.exe
- '11#.#17.180.219':3128
- '95.#6.53.15':3128
- '22#.#75.22.6':3128
- '95.##1.176.98':3128
- '60.##.66.166':3128
- '46.##0.82.130':3128
- '89.##6.250.68':3128
- '79.##0.13.167':3128
- '41.##1.25.199':3128
- '22#.#75.28.114':3128
- '22#.#75.248.97':3128
- '46.##0.80.141':3128
- '93.##0.248.139':3128
- '46.##1.104.209':3128
- '20#.#34.44.146':3128
- '21#.#.153.205':3128
- '82.##1.187.237':3128
- '22#.#75.23.180':3128
- '22#.#75.242.181':3128
- '95.##.198.68':3128
- '19#.#0.65.30':3128
- '22#.#75.241.108':3128
- '41.#8.3.69':3128
- '27.##7.25.82':3128
- '22#.#75.247.244':3128
- '95.##.247.133':3128
- '92.##.129.83':3128
- '17#.#58.202.187':3128
- '22#.#75.248.137':3128
- '22#.#75.22.101':3128
- '49.##.73.123':3128
- '22#.#75.3.31':3128
- '22#.#75.247.218':3128
- '22#.#75.22.105':3128
- '22#.#75.231.152':3128
- '87.##0.166.58':3128
- '79.##7.47.198':3128
- '12#.#6.62.33':3128
- '87.##1.19.76':3128
- '19#.#.159.165':3128
- '10#.#39.42.62':3128
- '22#.#75.23.163':3128
- '22#.#75.238.86':3128
- '22#.#75.248.221':3128
- '22#.#75.250.132':3128
- '22#.#75.248.233':3128
- '19#.#55.211.81':3128
- '80.##.168.76':3128
- '19#.#03.145.128':3128
- '22#.#75.248.163':3128
- '85.##.167.87':3128
- '22#.#75.23.127':3128
- '22#.#75.247.193':3128
- '22#.#75.22.36':3128
- '46.##1.181.217':3128
- '17#.#1.113.240':3128
- '82.##1.163.1':3128
- '37.#9.17.87':3128
- '21#.96.2.58':3128
- '22#.#75.247.11':3128
- '22#.#75.248.16':3128
- '10#.#75.55.188':3128
- '46.#.245.35':3128
- '46.##0.83.20':3128
- '27.##7.94.197':3128
- '61.##2.52.226':3128
- '81.##.24.123':3128
- '70.##.129.218':3128
- '21#.#5.49.228':3128
- '89.##4.194.121':3128
- '22#.#75.247.97':3128
- '22#.#23.137.108':3128
- '22#.#75.232.156':3128
- '22#.#75.247.144':3128
- '22#.#75.22.216':3128
- '22#.#75.231.199':3128
- '46.##0.81.79':3128
- '41.##.249.131':3128
- '2.###.28.150':3128
- '89.##5.106.30':3128
- '22#.#75.247.146':3128
- '15#.#81.162.135':3128
- '58.##.68.198':3128
- '22#.#75.231.68':3128
- '41.##0.80.144':3128
- '22#.#75.247.15':3128
- '22#.#75.231.161':3128
- '77.##7.15.31':3128
- '22#.#75.23.147':3128
- '46.##0.80.139':3128
- '22#.#75.23.17':3128
- '12#.#9.243.197':3128
- '21#.#.153.187':3128
- '77.##5.6.231':3128
- '49.##.211.215':3128
- '22#.#75.248.143':3128
- '22#.#75.232.120':3128
- '22#.#75.23.227':3128
- '95.##.213.219':3128
- '74.#15.3.67':3128
- '22#.#75.248.158':3128
- '79.##9.14.15':3128
- '58.##8.196.255':3128
- '22#.#75.22.22':3128
- '60.#8.67.22':3128
- '21#.#30.94.67':3128
- '22#.#37.116.4':3128
- '74.##2.170.132':3128
- '95.##.150.89':3128
- '41.##3.57.74':3128
- '22#.#75.248.51':3128
- '46.##0.83.91':3128
- '11#.#.133.200':3128
- '85.##0.98.101':3128
- '22#.#75.23.198':3128
- '22#.#75.247.117':3128
- '41.##3.57.76':3128
- '59.##.104.231':3128
- '22#.#75.23.29':3128
- '42.##1.216.200':3128
- '46.##0.81.191':3128
- '22#.#75.23.46':3128
- '22#.#75.248.203':3128
- '22#.#75.247.88':3128
- '91.##.251.199':3128
- '18#.#.187.95':3128
- '91.##5.38.175':3128
- '79.##7.47.194':3128
- '11#.#2.159.38':3128
- '41.##9.161.182':3128
- '84.##.87.152':3128
- '46.##0.83.108':3128
- '41.##3.57.72':3128
- '22#.#75.23.34':3128
- '92.##.34.126':3128
- '22#.#75.243.31':3128
- '46.##0.80.50':3128
- '22#.#75.3.212':3128
- '22#.#75.22.72':3128
- '11#.#49.157.50':3128
- '92.##5.41.62':3128
- '92.##.210.212':3128
- '95.##.103.27':3128
- '20#.#15.211.108':3128
- '95.##.194.154':3128
- '19#.#6.196.3':3128
- '87.##6.47.164':3128
- '22#.#75.248.187':3128
- '21#.#29.161.2':3128
- '89.##6.105.184':3128
- '61.##0.58.192':3128
- '31.##6.231.163':3128
- '95.##.93.166':3128
- '22#.#75.241.61':3128
- '41.##3.57.73':3128
- '94.##1.226.6':3128
- '46.##0.82.61':3128
- '46.##2.228.43':3128
- '95.##.103.10':3128
- '22#.#75.232.38':3128
- '82.##.179.147':3128
- '41.##.18.145':3128
- '19#.#02.155.133':3128
- '46.##0.83.142':3128
- '17#.#4.50.57':3128
- '22#.#75.247.92':3128
- '41.##0.246.66':3128
- '11#.#1.50.125':3128
- '80.##1.202.72':3128
- '15#.#10.69.31':3128
- '22#.#75.248.213':3128
- '22#.#75.248.183':3128
- '88.##.177.236':3128
- '61.#.33.12':3128
- '31.##6.246.141':3128
- '11#.#1.35.112':3128
- '46.#.202.69':3128
- '46.##0.83.227':3128
- '81.#0.0.17':3128
- '41.##7.193.182':3128
- '22#.#75.23.137':3128
- '27.#27.20.6':3128
- '27.##.34.108':3128
- '11#.#52.35.196':3128
- '14.##.158.164':3128
- '18#.#87.231.211':3128
- '85.##4.253.12':3128
- '22#.#75.232.83':3128
- '46.##0.80.178':3128
- '22#.#75.22.13':3128
- '19#.#01.203.152':3128
- '83.#.53.203':3128
- '39.#8.86.42':3128
- '27.##7.78.201':3128
- '22#.#75.236.218':3128
- '22#.#75.22.218':3128
- '95.##.236.38':3128
- '46.##0.83.146':3128
- '95.##.54.245':3128
- '77.##7.200.92':3128
- '49.##2.37.185':3128
- '22#.#75.23.179':3128
- '11#.#98.161.170':3128
- '22#.#75.231.201':3128
- '82.##5.11.142':3128
- '59.##3.24.130':3128
- '17#.#27.197.94':3128
- '60.##4.121.130':3128
- '2.##.152.103':3128
- '84.##0.219.70':3128
- '60.##.123.64':3128
- '93.##0.214.118':3128
- '41.##.123.243':3128
- '22#.#40.46.100':3128
- '46.##.224.85':3128
- '41.##0.65.243':3128
- '77.##.227.149':3128
- '22#.#75.246.252':3128
- '22#.#75.231.16':3128
- '89.##.13.133':3128
- '22#.#75.231.223':3128
- '41.##0.242.41':3128
- '81.##3.124.211':3128
- '36.#.64.232':3128
- '96.##.125.227':3128
- '74.#15.3.63':3128
- '89.##4.166.107':3128
- '22#.#75.232.202':3128
- '60.#8.62.45':3128
- '22#.#75.231.141':3128
- '11#.#8.22.162':3128
- '10#.#72.59.74':3128
- '22#.#75.232.204':3128
- '79.##2.39.152':3128
- '11#.#52.191.187':3128
- '18#.#4.37.254':3128
- '22#.#75.231.101':3128
- '22#.#75.236.196':3128
- '89.##2.1.144':3128
- '18#.#44.87.50':3128
- '95.##.75.134':3128
- '22#.#75.23.160':3128
- '12#.#36.230.51':3128
- '22#.#75.23.228':3128
- '22#.#75.248.34':3128
- '19#.#34.132.234':3128
- '60.##0.122.66':3128
- '95.##.79.159':3128
- '22#.#75.3.207':3128
- '60.#8.105.0':3128
- '60.#8.62.54':3128
- '41.##8.41.228':3128
- '22#.#75.23.213':3128
- '41.##0.83.188':3128
- '22#.#75.23.80':3128
- '79.##8.215.242':3128
- '82.##.234.168':3128
- '81.##.24.109':3128
- '77.##7.192.175':3128
- '77.#7.88.97':3128
- '20#.#23.188.243':3128
- '77.##7.177.80':3128
- '61.##5.136.244':3128
- '22#.#75.247.129':3128
- '11#.#8.23.67':3128
- '22#.#75.244.181':3128
- '22#.#75.247.133':3128
- '22#.#75.247.104':3128
- '95.##.210.86':3128
- '22#.#75.232.222':3128
- '24.##5.34.94':3128
- '46.##1.181.241':3128
- '61.##4.150.206':3128
- '46.##0.80.218':3128
- '89.##.222.115':3128
- '85.##5.83.227':3128
- '22#.#75.247.61':3128
- '17#.#.170.174':3128
- '22#.#75.248.222':3128
- '46.##0.80.171':3128
- '22#.#75.23.4':3128
- '22#.#75.247.1':3128
- '46.##0.80.72':3128
- '87.#6.49.71':3128
- '61.##7.156.198':3128
- '81.##2.101.184':3128
- '41.##0.75.73':3128
- '19#.#20.153.38':3128
- '46.#.245.38':3128
- '60.##.65.237':3128
- '81.##.24.116':3128
- '93.##.220.27':3128
- '46.##0.82.248':3128
- '19#.#38.18.90':3128
- '46.##0.80.239':3128
- '93.##.106.176':3128
- '62.#4.55.33':3128
- '11#.#54.2.95':3128
- '31.##6.240.173':3128
- '22#.#75.231.123':3128
- '18#.#95.40.137':3128
- '22#.#75.247.42':3128
- '22#.#75.231.81':3128
- '93.##5.69.141':3128
- '46.##0.82.87':3128
- '12#.#40.70.71':3128
- '22#.#75.231.46':3128
- '81.##.182.120':3128
- '22#.#75.244.32':3128
- '19#.#9.16.102':3128
- '19#.#55.209.74':3128
- '86.##.120.163':3128
- '77.##6.255.208':3128
- '12#.#9.243.194':3128
- '22#.#75.243.163':3128
- '22#.#75.248.10':3128
- '22#.#75.248.1':3128
- '22#.#75.23.251':3128
- '22#.#75.22.67':3128
- '22#.#75.232.232':3128
- '77.##1.80.23':3128
- '22#.#75.3.187':3128
- '81.##.24.101':3128
- '46.##0.82.100':3128
- '46.##0.80.20':3128
- '86.##6.40.27':3128
- '49.##.25.130':3128
- '78.##.242.233':3128
- '81.#3.24.97':3128
- '60.##9.139.157':3128
- '41.##0.78.241':3128
- '41.##0.68.10':3128
- '22#.#75.247.170':3128
- '22#.#08.240.137':3128
- '12#.#1.161.156':3128
- '22#.#75.247.231':3128
- '85.##0.81.228':3128
- '77.#45.6.90':3128
- '11#.#3.212.2':3128
- '46.##.69.228':3128
- '74.#15.6.49':3128
- '84.##9.65.149':3128
- '22#.#75.247.150':3128
- '22#.#75.248.154':3128
- '93.##0.226.143':3128
- '79.##7.28.212':3128
- '22#.#75.231.26':3128
- '22#.#75.247.16':3128
- '22#.#75.247.5':3128
- '17#.#45.176.102':3128
- '89.##.38.241':3128
- '36.#.136.71':3128
- '11#.#54.186.44':3128
- '46.##0.80.169':3128
- '41.##8.36.30':3128
- '79.##2.19.105':3128
- '46.##.117.10':3128
- '22#.#75.247.181':3128
- '12#.#9.36.18':3128
- '60.##4.250.128':3128
- '46.##0.82.104':3128
- '46.##1.181.230':3128
- '41.##.17.192':3128
- '41.##.46.213':3128
- '22#.#75.248.246':3128
- '81.#0.0.18':3128
- '88.##8.141.91':3128
- '17#.#5.67.237':3128
- '46.##1.181.229':3128
- '81.#3.24.99':3128
- '46.##0.83.43':3128
- '83.##1.161.142':3128
- '46.#0.16.86':3128
- '22#.#75.247.252':3128
- '61.##7.201.43':3128
- '46.##0.83.136':3128
- '22#.#75.247.76':3128
- '79.##3.116.100':3128
- '11#.#38.73.15':3128
- '41.##0.225.49':3128
- '22#.#75.246.198':3128
- '87.#8.57.42':3128
- '79.##1.209.196':3128
- '98.##7.248.135':3128
- '22#.#75.231.230':3128
- '84.##.225.234':3128
- '22#.#75.231.66':3128
- '91.##5.29.82':3128
- '22#.#75.247.93':3128
- '37.##.157.158':3128
- '22#.#75.244.242':3128
- '20#.#9.51.43':3128
- '41.##.104.62':3128
- '19#.#.97.196':3128
- '22#.#75.231.160':3128
- '17#.#22.143.34':3128
- '22#.#75.247.24':3128
- '46.##0.81.248':3128
- '19#.#9.122.146':3128
- '95.#5.38.93':3128
- '77.##.45.219':3128
- '95.##0.130.166':3128
- '41.##.17.190':3128
- '22#.#75.236.162':3128
- '22#.#75.243.180':3128
- '22#.#75.247.115':3128
- '22#.#75.3.13':3128
- '22#.#75.231.30':3128
- '11#.#54.54.13':3128
- '31.#7.163.9':3128
- '95.##1.151.172':3128
- '22#.#75.231.5':3128
- '22#.#75.22.166':3128
- '18#.#94.193.220':3128
- '22#.#75.248.238':3128
- '22#.#75.232.181':3128
- '85.##.188.224':3128
- '31.##.15.251':3128
- '19#.#04.141.211':3128
- '80.##.144.146':3128
- '79.##5.253.7':3128
- '20#.#09.168.15':3128
- '11#.#35.50.43':3128
- '46.##0.82.53':3128
- '10#.#25.175.163':3128
- '22#.#75.23.102':3128
- '42.##1.216.53':3128
- '41.##3.57.75':3128
- '22#.#75.241.213':3128
- '12#.#05.138.25':3128
- '22#.#75.231.90':3128
- '11#.#5.149.213':3128
- '46.##0.81.40':3128
- '46.##0.81.219':3128
- '19#.#.115.130':3128
- '77.##7.198.248':3128
- '79.##9.39.162':3128
- '22#.#75.3.68':3128
- '31.##8.11.139':3128
- '91.##5.50.110':3128
- '19#.#5.26.198':3128
- '87.##1.71.35':3128
- '17#.#39.117.243':3128
- '31.##6.241.243':3128
- '80.##.15.244':3128
- '21#.#12.170.65':3128
- '19#.#3.148.169':3128
- '22#.#75.232.59':3128
- '84.##.185.112':3128
- '19#.#.25.150':3128
- '22#.#75.248.124':3128
- '27.#.196.160':3128
- '18#.#2.80.42':3128
- '20#.#65.197.4':3128
- '46.##0.83.31':3128
- '41.##0.146.173':3128
- '49.##2.104.46':3128
- '95.##2.109.119':3128
- '59.##3.198.129':3128
- '41.##3.228.17':3128
- '60.##.63.228':3128
- '46.##3.151.232':3128
- '85.##.177.163':3128
- '20#.#28.26.240':3128
- '93.##6.154.250':3128
- '46.##0.83.118':3128
- '22#.#75.23.132':3128
- '22#.#75.248.110':3128
- '2.###.112.53':3128
- '85.##.167.176':3128
- '22#.#75.232.2':3128
- ClassName: 'Indicator' WindowName: ''