Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wjhjnhtg' = '"%APPDATA%\Microfiles2\HDPeal.exe"'
- '%APPDATA%\Microfiles2\HDPeal.exe'
- '<SYSTEM32>\svchost.exe'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\install.bat" "
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 2
- <SYSTEM32>\svchost.exe
- %TEMP%\~DFE10B.tmp
- %APPDATA%\logs.dat
- %TEMP%\install.bat
- %TEMP%\~DF7D6C.tmp
- %APPDATA%\Microfiles2\HDPeal.exe
- %APPDATA%\Microfiles2\HDPeal.exe
- %TEMP%\~DF7D6C.tmp
- 'ci####2.no-ip.biz':2404
- DNS ASK ci####2.no-ip.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''