Technical Information
- %TEMP%\is-CJ2E6.tmp\<Virus name>.tmp /SL5="$40036,1638187,140800,<Full path to virus>"
- opera.exe
- chrome.exe
- iexplore.exe
- firefox.exe
- %TEMP%\is-KLROE.tmp\Inst_dll.dll
- %TEMP%\is-KLROE.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-CJ2E6.tmp\<Virus name>.tmp
- ClassName: 'Shell_TrayWnd' WindowName: ''