Technical Information
- <SYSTEM32>\adtuosa.exe
- <SYSTEM32>\adtuosa.exe (downloaded from the Internet)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\adtuosa[1].exe
- <SYSTEM32>\adtuosa.exe
- C:\msn.exe
- C:\autorun.inf
- C:\msn.exe
- C:\autorun.inf
- 'vs##o.cn':80
- 'localhost':1035
- vs##o.cn/xxx/adtuosa.exe
- DNS ASK vs##o.cn
- '<Private IP address>':1036