Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe'
- '<Current directory>\happy farm hack 2014.exe'
- <Current directory>\HVMRuntm.dll
- <Current directory>\happy farm hack 2014.exe
- 'ar.##host.net':80
- 'wp#d':80
- ar.##host.net/download/58262087/bdb231a86c7fb0845abab765f0d710d974d1e13c/bdb231a86c7fb0845abab765f0d710d974d1e13c/Server.exe
- wp#d/wpad.dat
- DNS ASK ar.##host.net
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''