Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Audio HD Driver' = '%TEMP%\a4kHxTR3cpN0.exe'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Audio HD Driver' = '%TEMP%\a4kHxTR3cpN0.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'Audio HD Driver' = '%APPDATA%\a4kHxTR3cpN0.exe'
- hidden files
- User Account Control (UAC)
- %TEMP%\a4khxtr3cpn0.exe
- %APPDATA%\a4khxtr3cpn0.exe
- %TEMP%\delete.bat
- %WINDIR%\data
- %TEMP%\a4khxtr3cpn0.exe
- %APPDATA%\a4khxtr3cpn0.exe
- DNS ASK ug#####ked11.no-ip.org
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\delete.bat""