Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'searchindex.exe' = '"%WINDIR%\searchindex.exe"'
- %WINDIR%\searchindex.exe
- %WINDIR%\searchindex.exe
- DNS ASK tt##.no-ip.org
- '%WINDIR%\searchindex.exe'
- '%WINDIR%\searchindex.exe' ' (with hidden window)