Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'MSSE' = '<LS_APPDATA>\mysocialcolor.exe /S /rvt /uninstallAll /mds /enblChx /aflt=10092 /instlRef=cm9qb3wxMDIxYmFkZDZiYzI5N2EzODlmYTIxODQ0NjBkZGI='
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Google updater' = '<LS_APPDATA>\Google\Chrome\chromeupdater.exe /instlRef=cm9qb3wxMDIxYmFkZDZiYzI5N2EzODlmYTIxODQ0NjBkZGI= /VERYSILENT'
- '%TEMP%\is-62H5O.tmp\<Virus name>.tmp' /SL5="$30092,646957,56832,<Full path to virus>"
- %TEMP%\is-91NMO.tmp\chromeupdater.exe
- <LS_APPDATA>\mysocialcolor.exe
- %TEMP%\is-91NMO.tmp\itdownload.dll
- %TEMP%\is-62H5O.tmp\<Virus name>.tmp
- %TEMP%\is-91NMO.tmp\_isetup\_shfoldr.dll
- 'vf####.earching.info':80
- vf####.earching.info/toolbar
- DNS ASK vf####.earching.info
- ClassName: 'Shell_TrayWnd' WindowName: ''