Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Raslac] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %PROGRAM_FILES%\Windows Media Player\mpvps.dll
- <DRIVERS>\PCIDump.sys
- '20#.#6.232.182':80
- 20#.#6.232.182/en/us/default.aspx
- DNS ASK www.microsoft.com