Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'update.exe' = 'update'
- C:\s1.exe
- C:\s1.exe (downloaded from the Internet)
- C:\s1.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\s1[1].exe
- 's1##a.cz.cc':80
- 'localhost':1036
- s1##a.cz.cc/s1.exe
- DNS ASK s1##a.cz.cc
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'ConsoleWindowClass' WindowName: ''