Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{25BAC684-26DE-2EDB-0620-F509092DABE3}] 'stubpath' = ''
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\ggii\hiiihhhr.exe
- 'me####00.zapto.org':81
- 'aa#####111.zapto.org':81
- 'om####10.sytes.net':81
- DNS ASK me####00.zapto.org
- DNS ASK aa#####111.zapto.org
- DNS ASK om####10.sytes.net