Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'srchost.exe' = 'C:\Temp\srsys\srchost.exe'
- C:\temp\srsys\srvrs
- '95.##.137.96':80
- 'so###lastic.ru':666
- http://18#.#20.254.34/servers.txt
- http://www.so###lastic.ru/servers.txt
- DNS ASK so###lastic.ru