Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ОТµДЖф¶ЇПо' = '<Current directory>\TTDL.exe'
- '<Current directory>\TTDL.exe'
- [<HKCU>\Software\Microsoft\Internet Explorer\Main] 'Window Title' = 'ЗЬФфЗЬНхЈ¬ВоИЛІ»ВоДпЈ¬ДгёцЙµ±ЖЈ¬АПЧУМмМмИГДгПВПЯ-ДгХвёцSBѕНИГДгQQПВПЯБЛФхГґµО°ЙЈЎ БЄПµQQЈє10086'
- <SYSTEM32>\TTDL.exe\<Virus name>.exe
- <SYSTEM32>\TTDL.exe\TTDL.exe
- <Current directory>\TTDL.exe
- <SYSTEM32>\jedata.dll
- %HOMEPATH%\Favorites\QQ:772998226.dtl
- 'sm##.qq.com':25
- DNS ASK sm##.qq.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'