Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Server' = '%APPDATA%\Server.exe'
- %APPDATA%\server.exe
- DNS ASK pa#####vski.no-ip.org
- '%APPDATA%\server.exe'
- '%APPDATA%\server.exe' ' (with hidden window)
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe' "%APPDATA%\Server.exe"