Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\svochost.exe'
- %APPDATA%\svochost.exe
- %APPDATA%\svochost.exe
- %TEMP%\CRNJEUFU - 9-24-2012-8.31.10-PM.gif
- %TEMP%\e05f4ce2-1595-460a-86d2-a86a63250dab\CliSecureRT.dll
- 'sm##.gmail.com':587
- DNS ASK sm##.gmail.com
- ClassName: 'Indicator' WindowName: ''