Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'Computer Helper' = '"%ALLUSERSPROFILE%\750175\helper.exe" -a /a'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Computer Helper' = '"%ALLUSERSPROFILE%\750175\helper.exe" -a /a'
- %TEMP%\svhost.exe
- %ALLUSERSPROFILE%\ff0ffd16c7ab801a1e41e87308b56e5b347189e8
- %ALLUSERSPROFILE%\750175\helper.exe
- %ALLUSERSPROFILE%\ff0ffd16c7ab801a1e41e87308b56e5b347189e8
- 'te#####ist.duckdns.org':5502
- DNS ASK te#####ist.duckdns.org