Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'multicodecopen' = '"%ProgramFiles(x86)%\multicodec\multicodecopen.exe"'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'multicodec' = '"%ProgramFiles(x86)%\multicodec\multicodecup.exe"'
- http://www.mu####odec.co.kr/_counter/_proc/ins_proc.asp?ki#################################
- DNS ASK google.com
- DNS ASK mu####odec.co.kr
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''