Technical Information
- '%WINDIR%\system\rass32.exe'
- '<SYSTEM32>\net.exe' stop sharedaccess
- '<SYSTEM32>\net1.exe' stop sharedaccess
- '<SYSTEM32>\ping.exe' 127.1
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\system\705.5475.bat
- '<SYSTEM32>\ping.exe' -a 127.1
- '<SYSTEM32>\taskkill.exe' /f /im lass32.exe
- %WINDIR%\system\rass32.exe
- %WINDIR%\system\705.5475.bat
- %TEMP%\~DFAA0D.tmp
- 'localhost':1036
- DNS ASK yx##21.com
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'