Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Registry' = '%TEMP%\Registry.exe'
- '%TEMP%\Registry.exe'
- %TEMP%\Registry.exe
- %TEMP%\Registry.exe
- 'po#####mes.no-ip.org':2000
- DNS ASK po#####mes.no-ip.org
- ClassName: 'Indicator' WindowName: '(null)'