Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe
- Windows Security Center
- csrss.exe
- <Current directory>\microsoft.dll
- %APPDATA%\csrss.exe
- C:\security3.8.exe
- C:\boot.inf
- D:\security3.8.exe
- D:\boot.inf
- <Current directory>\microsoft.dll
- C:\security3.8.exe
- C:\boot.inf
- D:\security3.8.exe
- D:\boot.inf
- '255.255.255.255':1604
- DNS ASK ve#####ouk.dyndns.biz
- '%APPDATA%\csrss.exe'