Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'CleanBrowser' = '%WINDIR%\Temp\F4C.tmp.exe /install'
- 'li#####tscounter.com':443
- 'li#####tscounter.com':80
- http://li#####tscounter.com/SysInfo/cb6w.php?gu###################################
- http://li#####tscounter.com/SysInfo/1
- DNS ASK ev####.datahouse-us.com
- DNS ASK li#####tscounter.com