Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>4151611.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>4151626.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>4151556.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>4151525.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>4151541.exe'
- from <Full path to virus>4151556.exe to <Full path to virus>4151611.exe
- from <Full path to virus>4151611.exe to <Full path to virus>4151626.exe
- from <Full path to virus>4151541.exe to <Full path to virus>4151556.exe
- from <Full path to virus> to <Full path to virus>4151525.exe
- from <Full path to virus>4151525.exe to <Full path to virus>4151541.exe
- '12#.#5.179.189':80