Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\NWCWorkstation] 'Start' = '00000002'
- <SYSTEM32>\taskkill.exe /F /T /IM rstRAY.EXE
- %TEMP%\129234_Index.TEMP
- %PROGRAM_FILES%\Internet Explorer\NWCWorkstation360.dll
- from %TEMP%\129234_Index.TEMP to %PROGRAM_FILES%\Internet Explorer\NWCWorkstation360.dll
- 'cn#.#600.org':8000
- DNS ASK cn#.#600.org
- ClassName: '' WindowName: ''