Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Winet] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\winnet.dll
- <Current directory>\KKK.dll
- <SYSTEM32>\winnet.dll.uns
- <SYSTEM32>\winnet.dll
- <Current directory>\KKK.dll
- 'ai####hu.51vip.biz':2009
- DNS ASK ai####hu.51vip.biz
- ClassName: 'Afx:400000:0' WindowName: ''