Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Cjghnj Shohgopg Ybt' = ''
- %WINDIR%\Drusnbhct.exe
- %WINDIR%\Drusnbhct.exe
- 'ab####1.xicp.net':6666
- DNS ASK ab####1.xicp.net
The page may not load correctly.
Added to the Dr.Web virus database: 2013-03-21
Virus description added: 2013-03-22