Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'yFm40O' = '%HOMEPATH%\wAk55J\conhost.exe'
- hidden files
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
- %TEMP%\aut35b8.tmp
- %TEMP%\syi60k.pz9
- %TEMP%\syi60k.pz9
- %TEMP%\aut35b8.tmp
- '255.255.255.255':5778
- DNS ASK do####ts.noip.me