Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Ghijkl Nrtgddtu Wxy] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Ghijkl Nrtgddtu Wxy] 'ImagePath' = '%ProgramFiles(x86)%\Arrange\asmtus.exe'
- 'Ghijkl Nrtgddtu Wxy' %ProgramFiles(x86)%\Arrange\asmtus.exe
- %ProgramFiles(x86)%\arrange\asmtus.exe
- %ProgramFiles(x86)%\arrange\asmtus.exe
- from <Full path to file> to %WINDIR%\syswow64\1128292.bak
- '15#.#11.4.95':8090
- ClassName: 'CTXOPConntion_Class' WindowName: ''
- '%ProgramFiles(x86)%\arrange\asmtus.exe'
- '%ProgramFiles(x86)%\arrange\asmtus.exe' Win7