Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\ГЇВµГ³·þîñ.exe
- C:\test\sherct.exe
- C:\test\test.exe
- <Full path to file>
- C:\test\sherct.exe
- http://ys##.ys168.com/612086112/m5U612M6J5OIMhSvIjs/test0901.exe
- DNS ASK ys##.ys168.com
- DNS ASK fl###-cn.org