Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'noghyp' = '%WINDIR%\noghyp.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' http://no##yp.com/8.html
- %WINDIR%\noghyp.exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\hosts[1].txt
- %WINDIR%\HotzT.ini
- 'no##yp.com':17
- 'no##yp.com':80
- 'localhost':1043
- http://no##yp.com/hosts.txt
- http://no##yp.com/8.html
- DNS ASK no##yp.com
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- '%WINDIR%\noghyp.exe'