Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'luandan.exe' = 'C:\rinver\luandan.exe'
- 'C:\rinver\luandan.exe'
- C:\rinver\luandan.exe
- C:\rinver\luandan.exe
- <Full path to virus>
- '1.##.36.146':3399
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Microsoft Internet Explorer'