Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Smart Security' = '<Full path to file>'
- %APPDATA%\Shell\filestart.bat
- %APPDATA%\Shell\windata.exe
- %APPDATA%\check.txt
- %APPDATA%\Shell\winhost.exe
- <Full path to file>
- %APPDATA%\check.txt
- 'bi####e-store.ru':80
- 'ec####og.ucoz.ru':80
- 'go#.gl':443
- http://bi####e-store.ru/64/mupdate.exe
- http://bi####e-store.ru/64/anewline.exe
- http://ec####og.ucoz.ru/
- DNS ASK bi####e-store.ru
- DNS ASK ec####og.ucoz.ru
- DNS ASK go#.gl
- ClassName: 'AutoHotkey' WindowName: '<Full path to file>'
- '<SYSTEM32>\cmd.exe' /c filestart.bat