Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '%WINDIR%\Okqmooe.exe'
- %WINDIR%\scvhost.exe
- %WINDIR%\okqmooe.exe
- %WINDIR%\scvhost.exe
- '13#.#55.123.38':8888
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: 'perfmon.exe'
- ClassName: '' WindowName: 'taskmgr.exe'
- '%WINDIR%\scvhost.exe'