Technical Information
- [<HKLM>\software\microsoft\windows\currentversion\Policies\Explorer\Run] '418643069' = '%ProgramFiles%\msocueij.exe'
- [<HKCU>\software\microsoft\windows nt\currentversion\Windows] 'Load' = ''
- hidden files
- Windows Firewall
- Windows Update
- Windows Security Center
- Windows Defender
- User Account Control (UAC)
- Windows Action Center
- Hides taskbar notifications
- %WINDIR%\syswow64\msiexec.exe
- %ProgramFiles%\msocueij.exe
- %ProgramFiles%\msocueij.exe
- 'microsoft.com':80
- 'bi###cotrej.com':80
- http://bi###cotrej.com/blog/index.php
- DNS ASK eu####.pool.ntp.org
- DNS ASK microsoft.com
- DNS ASK bi###cotrej.com
- 'eu####.pool.ntp.org':123
- '%WINDIR%\syswow64\msiexec.exe'