Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\ccleaner.url
- hidden files
- file extensions
- <LS_APPDATA>\Microsoft\Windows\Services\conh0st.exe
- <LS_APPDATA>\Microsoft\Windows\Services\conh0st.exe
- %TEMP%\representation.xls
- <LS_APPDATA>\Microsoft\Windows\Services\conh0st.exe
- 'my#####ess.no-ip.org':8585
- DNS ASK my#####ess.no-ip.org