Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{104B3D2B-B498-219A-0305-030803030504}] 'StubPath' = '<SYSTEM32>\hhh.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\1F613.dmp
- 'ka##.no-ip.biz':3460
- 'zb###.no-ip.biz':3460
- DNS ASK ka##.no-ip.biz
- DNS ASK zb###.no-ip.biz
- ClassName: 'Shell_TrayWnd' WindowName: ''