Technical Information
- [<HKLM>\System\CurrentControlSet\Services\DFWebRelayService] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\DFWebRelayService] 'ImagePath' = '<Current directory>\DFWebRelay.exe'
- %TEMP%\_$df\dfinit.sib
- %TEMP%\_$df\dfinit.sib
- DNS ASK de###reeze.com
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''