Technical Information
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\System68.exe" "System68.exe" ENABLE
- %TEMP%\g00gle.exe
- %TEMP%\autokeyboardsetup.exe
- %TEMP%\is-m2qei.tmp\autokeyboardsetup.tmp
- %TEMP%\is-qjvnp.tmp\_isetup\_regdll.tmp
- %TEMP%\is-qjvnp.tmp\_isetup\_setup64.tmp
- %TEMP%\is-qjvnp.tmp\_isetup\_shfoldr.dll
- %APPDATA%\system68.exe
- 'xc#####l93.myddns.me':5552
- DNS ASK xc#####l93.myddns.me
- '%TEMP%\g00gle.exe'
- '%TEMP%\autokeyboardsetup.exe'
- '%TEMP%\is-m2qei.tmp\autokeyboardsetup.tmp' /SL5="$A0214,749412,53248,%TEMP%\autokeyboardsetup.exe"
- '%APPDATA%\system68.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\System68.exe" "System68.exe" ENABLE' (with hidden window)