Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>414558.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>414613.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>414543.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>414513.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Kris' = '<Full path to virus>414528.exe'
- from <Full path to virus>414543.exe to <Full path to virus>414558.exe
- from <Full path to virus>414558.exe to <Full path to virus>414613.exe
- from <Full path to virus>414528.exe to <Full path to virus>414543.exe
- from <Full path to virus> to <Full path to virus>414513.exe
- from <Full path to virus>414513.exe to <Full path to virus>414528.exe
- '11#.#11.111.1':0
- DNS ASK ################# .localdomain