Technical Information
- <Drive name for removable media>:\fa9d2415a0b60ed9c375b2ffe9f91a1f.exe
- <Drive name for removable media>:\autorun.inf
- hidden files
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\Browser.exe" "Browser.exe" ENABLE
- %APPDATA%\browser.exe
- <Drive name for removable media>:\fa9d2415a0b60ed9c375b2ffe9f91a1f.exe
- <Drive name for removable media>:\autorun.inf
- %APPDATA%\browser.exe
- DNS ASK ma####.linkpc.net
- '%APPDATA%\browser.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%APPDATA%\Browser.exe" "Browser.exe" ENABLE' (with hidden window)