Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\W32Time] 'Start' = '00000002'
- %PROGRAM_FILES%\NVIDIA\NMntEx.OLE
- %PROGRAM_FILES%\NVIDIA\NMntEx.Dll
- from <Full path to virus> to %TEMP%\PK32.LOG
- 'co####5.3322.org':810
- DNS ASK co####5.3322.org
- '<Private IP address>':1035
- ClassName: '' WindowName: 'opjkropioiasdjaieee'