Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Inter_Moni' = '%WINDIR%\inter_moni\In_Monitor.exe'
- [HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Net_work' = '%ProgramFiles%\citrix\net_work.exe'
- %WINDIR%\inter_moni\in_monitor.exe
- '66##.8800.org':80
- DNS ASK 66##.8800.org