Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'engel' = '%APPDATA%\updates\updates.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\YOUTUBE.VIDEO.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- <SYSTEM32>\netsh.exe advfirewall firewall add rule name="<Virus name>" dir=in action=allow program="<Full path to virus>"
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Associations] 'LowRiskFileTypes' = '.exe'
- %APPDATA%\engel\updates.exe
- '22#.#75.232.8':3128
- '41.##.191.170':3128
- '59.##3.159.251':3128
- '22#.#75.235.131':3128
- '20#.#4.218.162':3128
- '22#.#94.180.163':3128
- '22#.#75.28.203':3128
- '22#.#75.250.52':3128
- '77.#45.6.24':3128
- '22#.#75.28.156':3128
- '95.#8.58.38':3128
- '10#.#6.35.33':3128
- '22#.#75.248.53':3128
- '22#.#75.29.195':3128
- '22#.#75.28.216':3128
- '94.##1.226.6':3128
- '41.##.17.192':3128
- '22#.#75.29.150':3128
- '58.##3.125.236':3128
- '24.##9.138.116':3128
- '22#.#75.28.5':3128
- '41.##.144.113':3128
- '17#.#03.237.173':3128
- '22#.#75.236.57':3128
- '22#.#75.29.229':3128
- '22#.#75.17.120':3128
- '22#.#75.236.39':3128
- '41.##.21.169':3128
- '37.##.171.124':3128
- '41.#8.40.63':3128
- '12#.#9.36.18':3128
- '22#.#75.236.223':3128
- '22#.#75.232.26':3128
- '87.##0.166.58':3128
- '21#.#30.88.65':3128
- '42.##1.173.184':3128
- '41.##0.78.241':3128
- '19#.#20.153.38':3128
- '46.##.136.123':3128
- '94.##.119.242':3128
- '22#.#75.247.212':3128
- '22#.#75.248.99':3128
- '77.##5.6.251':3128
- '1.##5.207.8':3128
- '11#.#52.19.87':3128
- '11#.#3.212.2':3128
- '11#.#54.131.100':3128
- '22#.#75.247.26':3128
- '22#.#75.231.91':3128
- '77.##.45.219':3128
- '37.##.168.172':3128
- '22#.#75.233.77':3128
- '18#.#13.227.13':3128
- '22#.#75.232.110':3128
- '58.##.71.229':3128
- '95.##.202.209':3128
- '93.##.220.27':3128
- '22#.#75.248.26':3128
- '22#.#75.231.144':3128
- '22#.#75.236.67':3128
- '22#.#75.232.43':3128
- '19#.#6.196.3':3128
- '22#.#75.29.216':3128
- '22#.#75.232.127':3128
- '22#.#75.23.60':3128
- '22#.#75.29.248':3128
- '11#.#8.22.162':3128
- '22#.#75.244.221':3128
- '86.##1.54.123':3128
- '22#.#75.247.109':3128
- '88.##8.141.91':3128
- '79.##8.42.65':3128
- '91.##8.192.82':3128
- '81.#0.0.18':3128
- '91.#8.74.35':3128
- '79.##5.253.7':3128
- '22#.#75.248.230':3128
- '92.##.153.42':3128
- '22#.#75.231.149':3128
- '41.##.17.190':3128
- '46.##3.244.113':3128
- '58.##8.229.15':3128
- '84.##0.204.24':3128
- '22#.#75.29.168':3128
- '22#.#75.29.72':3128
- '41.##8.47.12':3128
- '21#.#12.170.65':3128
- '22#.#75.29.73':3128
- '86.##4.255.149':3128
- '59.##4.114.242':3128
- '22#.#75.248.7':3128
- '11#.#8.45.38':3128
- '20#.#65.197.4':3128
- '94.##0.163.207':3128
- '22#.#75.247.21':3128
- '41.##8.38.97':3128
- '22#.#75.247.197':3128
- '22#.#75.28.235':3128
- '22#.#75.243.155':3128
- '22#.#75.244.171':3128
- '59.##3.204.38':3128
- '19#.#.159.165':3128
- '18#.#08.118.197':3128
- '22#.#75.29.231':3128
- '22#.#75.247.112':3128
- '22#.#75.247.79':3128
- '22#.#75.242.174':3128
- '22#.#75.232.58':3128
- '15#.#85.222.116':3128
- '22#.#75.29.60':3128
- '82.##9.227.197':3128
- '22#.#75.247.134':3128
- '95.##6.204.48':3128
- '22#.#75.231.4':3128
- '22#.#75.247.37':3128
- '20#.#28.26.240':3128
- '18#.#4.197.167':3128
- '18#.#54.249.234':3128
- '22#.#75.244.143':3128
- '82.##0.237.222':3128
- '10#.#54.18.214':3128
- '22#.#75.244.182':3128
- '41.##7.133.190':3128
- '22#.#75.28.244':3128
- '22#.#75.235.250':3128
- '22#.#75.247.251':3128
- '85.##0.98.101':3128
- '22#.#75.231.208':3128
- '88.##4.153.70':3128
- '22#.#75.28.171':3128
- '21#.#30.117.98':3128
- '27.#.138.205':3128
- '22#.#75.232.91':3128
- '22#.#75.236.227':3128
- '22#.#75.3.96':3128
- '59.##.77.248':3128
- '49.#12.74.7':3128
- '41.#8.4.6':3128
- '22#.#75.231.128':3128
- '19#.#01.207.232':3128
- '74.#15.3.63':3128
- '61.##4.150.206':3128
- '46.##1.181.230':3128
- '95.##.211.129':3128
- '41.##1.243.233':3128
- '69.##.46.169':3128
- '22#.#75.28.141':3128
- '74.#15.6.49':3128
- '78.#9.76.17':3128
- '41.##1.162.218':3128
- '11#.#35.50.43':3128
- '22#.#75.23.201':3128
- '20#.#22.53.220':3128
- '41.##3.57.76':3128
- '19#.#9.98.232':3128
- '59.##3.158.27':3128
- '22#.#75.231.165':3128
- '22#.#75.235.240':3128
- '37.##.136.29':3128
- '22#.#75.29.148':3128
- '22#.#75.28.22':3128
- '95.##2.109.119':3128
- '77.##3.174.21':3128
- '41.##8.36.30':3128
- '37.#5.8.122':3128
- '49.##9.16.118':3128
- '60.##4.121.130':3128
- '61.##2.174.12':3128
- '22#.#75.232.113':3128
- '41.##1.109.80':3128
- '22#.#75.232.213':3128
- '22#.#75.235.196':3128
- '82.##9.226.186':3128
- '22#.#75.23.38':3128
- '22#.#75.235.202':3128
- '77.##1.80.23':3128
- '22#.#75.236.153':3128
- '22#.#75.243.1':3128
- '22#.#75.248.23':3128
- '59.##3.24.205':3128
- '22#.#75.235.212':3128
- '83.##8.28.136':3128
- '95.##.56.206':3128
- '22#.#75.235.92':3128
- '91.##5.38.175':3128
- '21#.#33.163.42':3128
- '85.##.110.99':3128
- '46.##5.145.88':3128
- '84.##0.198.27':3128
- '10#.#31.31.65':3128
- '79.##5.138.210':3128
- '41.##.194.193':3128
- '11#.88.1.11':3128
- '11#.#4.123.117':3128
- '22#.#75.250.168':3128
- '22#.#75.28.77':3128
- '12#.#6.62.33':3128
- '22#.#75.248.156':3128
- '22#.#75.231.112':3128
- '61.#.69.124':3128
- '22#.#75.232.141':3128
- '11#.#8.215.123':3128
- '46.##1.222.72':3128
- '22#.#75.23.6':3128
- '19#.#9.16.102':3128
- '22#.#75.28.4':3128
- '22#.#75.23.19':3128
- '10#.#22.75.110':3128
- '22#.#75.248.167':3128
- '22#.#75.236.105':3128
- '84.##4.225.125':3128
- '78.##.242.233':3128
- '18#.#16.160.2':3128
- '22#.#75.236.49':3128
- '22#.#75.22.232':3128
- '12#.#1.119.56':3128
- '95.##.198.21':3128
- '17#.#00.128.191':3128
- '22#.#75.248.11':3128
- '22#.#75.248.206':3128
- '19#.#.218.155':3128
- '22#.#75.247.145':3128
- '22#.#75.235.13':3128
- '19#.#02.56.10':3128
- '80.##.168.131':3128
- '22#.#75.236.176':3128
- '20#.#1.160.62':3128
- '22#.#75.248.91':3128
- '22#.#75.231.32':3128
- '85.##3.156.199':3128
- '22#.#75.227.192':3128
- '41.##9.234.53':3128
- '84.##.225.234':3128
- '22#.#75.247.88':3128
- '11#.#8.12.224':3128
- '22#.#75.236.20':3128
- '22#.#75.29.179':3128
- '22#.#75.231.163':3128
- '22#.#75.236.143':3128
- '22#.#75.248.40':3128
- '22#.#75.247.18':3128
- '41.##8.36.76':3128
- '22#.#75.231.24':3128
- '17#.#3.254.239':3128
- '22#.#75.23.59':3128
- '22#.#75.227.179':3128
- '89.##.210.115':3128
- '11#.#74.28.6':3128
- '22#.#75.235.83':3128
- '22#.#75.232.146':3128
- '87.##1.19.76':3128
- '22#.#75.243.226':3128
- '89.##5.244.229':3128
- '22#.#75.28.123':3128
- '22#.#75.231.95':3128
- '22#.#75.28.74':3128
- '11#.#7.242.190':3128
- '22#.#75.248.60':3128
- '22#.#75.244.237':3128
- '22#.#75.243.175':3128
- '19#.#38.18.90':3128
- '20#.#79.72.122':3128
- '22#.#75.29.103':3128
- '18#.#2.118.112':3128
- '22#.#75.232.152':3128
- '22#.#75.244.128':3128
- '22#.#75.236.79':3128
- '22#.#75.244.7':3128
- '22#.#75.247.159':3128
- '11#.#49.157.50':3128
- '22#.#75.232.240':3128
- '46.##0.194.250':3128
- '22#.#75.29.13':3128
- '22#.#75.232.29':3128
- '22#.#75.28.204':3128
- '20#.#09.13.58':3128
- '46.##1.181.229':3128
- '22#.#75.23.116':3128
- '41.##1.25.199':3128
- '22#.#75.228.25':3128
- '22#.#75.244.144':3128
- '22#.#75.233.101':3128
- '59.#4.105.4':3128
- '17#.#27.128.86':3128
- '94.##8.65.230':3128
- '81.#0.0.17':3128
- '46.##9.87.55':3128
- '22#.#75.23.87':3128
- '20#.#4.168.142':3128
- '22#.#75.244.123':3128
- '22#.#75.29.25':3128
- '86.##.120.163':3128
- '41.#8.14.71':3128
- '22#.#75.232.5':3128
- '22#.#75.235.4':3128
- '41.##7.86.29':3128
- '93.#5.13.33':3128
- '22#.#75.248.254':3128
- '11#.#8.7.225':3128
- '94.##3.66.229':3128
- '18#.#5.147.246':3128
- '22#.#75.231.99':3128
- '89.##.38.241':3128
- ClassName: 'Indicator' WindowName: ''