Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SfKg6wIPuS' = '<Full path to virus>'
- %TEMP%\FPUninstall.exe
- 'cl#####.flipopia.com':80
- cl#####.flipopia.com/upd.php
- DNS ASK cl#####.flipopia.com
- ClassName: 'Indicator' WindowName: ''