Technical Information
- '<SYSTEM32>\taskkill.exe' /F /IM "mss.exe
- %TEMP%\RarSFX0\mss.exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\web-u[1].php
- %TEMP%\RarSFX0\mss.exe
- 'localhost':1036
- 'vh###lly.net':80
- http://www.vh###lly.net/deskinfo/css/web-u.php via vh###lly.net
- DNS ASK www.vh###lly.net
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- '%TEMP%\RarSFX0\mss.exe'