Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Host' = '\Host.exe /start'
- '%ProgramFiles%\host\Host.exe' /install
- %ProgramFiles%\host\RCX1.tmp
- %ProgramFiles%\host\Host.ico
- %ProgramFiles%\host\Host.exe
- %ProgramFiles%\host\Host.ico
- %ProgramFiles%\host\Host.exe
- %ProgramFiles%\host\Host.exe
- 'ho#####lder.shardara.kz':80
- http://ho#####lder.shardara.kz/find_id.php
- DNS ASK ho#####lder.shardara.kz