Technical Information
- '<SYSTEM32>\taskkill.exe' /f /im server.dat
- 'localhost':1036
- 'ww.#eo60.cn':80
- http://ww.#eo60.cn/1/om/valid_announce.asp?so############################
- http://ww.#eo60.cn/1/om/valid_ver.asp?so#############
- DNS ASK ww.#eo60.cn
- ClassName: '' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c regsvr32 /u /s <SYSTEM32>\aliedit\aliedit.dll
- '<SYSTEM32>\regsvr32.exe' /u /s %WINDIR%\SysWOW64\aliedit\aliedit.dll
- '<SYSTEM32>\regsvr32.exe' /u /s <SYSTEM32>\aliedit\aliedit.dll
- '<SYSTEM32>\cmd.exe' /c taskkill /f /im server.dat