Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'coaster' = '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- from <Full path to file> to %WINDIR%\syswow64\1100000.bak
- '11#.#.210.196':5555
- ClassName: 'CTXOPConntion_Class' WindowName: ''