Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Run' = ''
- '<SYSTEM32>\rundll32.exe' dfdts.dll,DfdGetDefaultPolicyAndSMART
- <LS_APPDATA>\ffpxomev.exe
- 'cp####2.no-ip.info':82
- DNS ASK dn#.##ftncsi.com
- DNS ASK cp####2.no-ip.info
- ClassName: 'Indicator' WindowName: '(null)'