Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\AALr6jVzuP.eu.url
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- %TEMP%\566a014e-d872-fe52-802e-b7621266fe5f
- %TEMP%\724f7d97-cd11-2a74-6cf6-376bb3048229
- %TEMP%\a0QjndD.MC
- %APPDATA%\AALr6jVzuP\AALr6jVzuP.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut1.tmp
- 'wp#d':80
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK bo#.####ismyipaddress.com
- DNS ASK wp#d
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'