Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HD_SafeGuard' = '%TEMP%\pf-data\system.exe'
- <Full path to virus>:Zone.Identifier
- %TEMP%\pf-data\system.exe
- '<Private IP address>':1994
- ClassName: 'Indicator' WindowName: ''