Technical Information
- [HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'coaster' = '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- from <Full path to file> to %WINDIR%\syswow64\792438.bak
- '49.##3.244.10':8080
- '49.##3.244.10':8080
- ClassName: 'CTXOPConntion_Class' WindowName: ''