Technical Information
- %WINDIR%\syswow64\svchost.exe
- óåìåno90iv.tmp
- <Current directory>\óåìåno90iv.tmp
- <Current directory>\favicon.ico
- %TEMP%\777.dll
- <Current directory>\óåìåno90iv.tmp
- <Current directory>\favicon.ico
- ClassName: 'WTWindow' WindowName: 'XX¹ý¼ì²â'
- '<Current directory>\óåìåno90iv.tmp'
- '%WINDIR%\syswow64\netsh.exe' winsock reset' (with hidden window)
- '%WINDIR%\syswow64\svchost.exe'
- '%WINDIR%\syswow64\netsh.exe' winsock reset