Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'CFSYSTEM.EXE' = '%APPDATA%\Microsoft\Windows\Network Shortcuts\sysSocket\sm55hlr.exe'
- ClassName: 'TibiaClient', WindowName: ''
- 'as####us.webd.pl':80
- 'we#d.pl':443
- http://as####us.webd.pl/kwb/add.php?da###############
- http://we#d.pl/_err404.php
- 'as####us.webd.pl':443
- DNS ASK as####us.webd.pl
- DNS ASK we#d.pl
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''