Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft services' = '"%APPDATA%\System Manager\<File name>.exe"'
- %APPDATA%\system manager\<File name>.exe
- %APPDATA%\system manager\bygujsnv.txt
- 'ip###key.com':80
- 'fi###.#00webhost.com':21
- http://ip###key.com/
- 'fi###.#00webhost.com':21
- DNS ASK ip###key.com
- DNS ASK fi###.#00webhost.com