Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'foxqgzy876' = '%WINDIR%\help\unicox.exe'
- msnmsgr.exe
- %WINDIR%\foxdll.vxd
- %WINDIR%\Help\UNICOX.EXE
- %WINDIR%\first.dll
- 'sm##.##n.terra.com.br':25
- DNS ASK sm##.##n.terra.com.br
- ClassName: 'Shell_TrayWnd' WindowName: ''