Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'crsr.exe' = '%WINDIR%\crsr.exe'
- '%WINDIR%\algg1.exe'
- '%WINDIR%\algg.exe'
- '%WINDIR%\plik.exe' -pasdasd
- ClassName: 'TibiaClient', WindowName: ''
- %WINDIR%\crsr.exe
- %WINDIR%\algg1.exe
- %WINDIR%\plik.exe
- %WINDIR%\algg.exe
- '18#.#65.245.114':80
- http://www.ua####eylogger.pl/version.txt via 18#.#65.245.114
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''