Technical Information
- %TEMP%\nsh2482.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nsp2936.tmp
- DNS ASK pc###htymax.net
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\
- '%WINDIR%\syswow64\rundll32.exe' url.dll,FileProtocolHandler http://www.pc###htymax.net/AfterInstall/Exit.php?id######