Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{5F7C5FF4-8E8A-7901-2A92-5401DC8A31A4}] 'stubpath' = '%ProgramFiles(x86)%\scf\server.exe s'
- ClassName: 'OLLYDBG', WindowName: ''
- ClassName: 'GBDYLLO', WindowName: ''
- ClassName: 'pediy06', WindowName: ''
- %APPDATA%\addons.dat
- %ProgramFiles(x86)%\scf\server.exe
- %ProgramFiles(x86)%\scf\server.exe
- %APPDATA%\addons.dat
- 'ra#####ilo.no-ip.biz':2000
- DNS ASK ra#####ilo.no-ip.biz