Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Winsys' = '%WINDIR%\Winscress.exe'
- %WINDIR%\Winscress.exe
- '<Private IP address>':135
- 'ht####32.no-ip.biz':3464
- 'bf##.no-ip.biz':3463
- DNS ASK ht####32.no-ip.biz
- DNS ASK bf##.no-ip.biz