Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'MSSE' = '<LS_APPDATA>\mysocialcolor.exe /S /rvt /uninstallAll /mds /enblChx /aflt=24516 /instlRef=10235713473473b4a68ec14481d67c'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Google updater' = '<LS_APPDATA>\Google\Chrome\chromeupdater.exe /instlRef=10235713473473b4a68ec14481d67c /VERYSILENT'
- '%TEMP%\is-C20T8.tmp\<Virus name>.tmp' /SL5="$30092,645691,56832,<Full path to virus>"
- %TEMP%\is-2UE3F.tmp\chromeupdater.exe
- <LS_APPDATA>\mysocialcolor.exe
- %TEMP%\is-2UE3F.tmp\itdownload.dll
- %TEMP%\is-C20T8.tmp\<Virus name>.tmp
- %TEMP%\is-2UE3F.tmp\_isetup\_shfoldr.dll
- 'vf####.earching.info':80
- vf####.earching.info/toolbar
- DNS ASK vf####.earching.info
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'