Behavior Details

1. Dropped files:
Report.wer.tmp
Report.wer
Under the folder
C:\ProgramData\Microsoft\Windows\WER\ReportQueue\NonCritical_x64_e317d1ce19fa961dfda531fc4a2c595260922c_cab_052972aa

2. Dropped files:
Endpoint
Under the folder
\Device\Afd

3. Dropped files:
RasAcd
Under the folder
\Device

4. Dropped files:
ValidationTask
ValidationTaskDeadline
Under the folder
C:\Windows\sysnative\Tasks\Microsoft\Windows\Windows Activation Technologies

5. Dropped files:
ikon
Under the folder
C:\Windows\sysnative\Tasks

6. Creates Registry:

Adds registry data
0

Under the key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet

Adds registry data
1

Under the key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect

Removal Instructions

1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Open Windows registry editor.
4. Delete the registry data
0

Under the key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet

5. Delete the registry data
1

Under the key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect
6. Close the Windows registry.
7. Restart the machine.