Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '"%APPDATA%\svchost.exe\svchost.exe"'
- <Current directory>\<File name>.log
- %APPDATA%\svchost.exe
- 'up####.appchecker.info':80
- http://up####.appchecker.info/run
- DNS ASK up####.appchecker.info