Technical Information
- [<HKLM>\System\CurrentControlSet\Services\yixvpyisky] 'ImagePath' = '%TEMP%\xbgrzpcfta.sys'
- 'yixvpyisky' %TEMP%\xbgrzpcfta.sys
- %TEMP%\xbgrzpcfta.sys
- %WINDIR%\temp\udde983.tmp
- %WINDIR%\temp\udde983.tmp
- %TEMP%\xbgrzpcfta.sys
- '10#.#60.34.101':8081
- '45.##4.10.155':8081
- '14#.31.0.0':261