Technical Information
- %HOMEPATH%\bci\bcisex.exe
- %HOMEPATH%\bci.hta
- %HOMEPATH%\bci.vbs
- C:\users\public\clean.bat
- C:\users\public\sspicli.dll
- C:\users\public\perfmon.exe
- C:\users\public\runex.bat
- %APPDATA%\arab999\logs.dat
- C:\users\public\clean.bat
- C:\users\public\sspicli.dll
- C:\users\public\runex.bat
- C:\users\public\perfmon.exe
- 'An#######lyghost.duckdns.org':1759
- DNS ASK An#######lyghost.duckdns.org
- '%WINDIR%\syswow64\cmd.exe' /c ""C:\Users\Public\Runex.bat" "' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""C:\Users\Public\Runex.bat" "
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'