Technical Information
- %CommonProgramFiles%\Service\Guarder.exe
- %CommonProgramFiles%\Service\svchost.exe
- %CommonProgramFiles%\Service\RCX1.tmp
- %CommonProgramFiles%\Service\Guarder.exe
- %CommonProgramFiles%\Service\Record.dat
- %CommonProgramFiles%\Service\svchost.exe
- %CommonProgramFiles%\Service\Record.dat
- %CommonProgramFiles%\Service\svchost.exe
- 'www.yi##olm.com':8080
- 'www.ba##u.com':80
- www.ba##u.com/
- DNS ASK www.yi##olm.com
- DNS ASK www.co###adman.com
- DNS ASK www.ba##u.com
- '<Private IP address>':1035