Technical Information
Modifies file system :
Creates the following files:
- <SYSTEM32>\GroupPolicy\User\Scripts\script.ini
- %WINDIR%\Temp\svchost.exe
Network activity:
Connects to:
- '11#.#13.152.225':80
The page may not load correctly.
Added to the Dr.Web virus database: 2011-08-08
Virus description added: 2011-08-08