Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'zPi91L' = '%HOMEPATH%\iTp96X\KEYGEN-Winrar.exe'
- <Drive name for removable media>:\<File name>.exe
- %TEMP%\autb3e1.tmp
- %TEMP%\pvd88b.iz6
- C:\<File name>.exe
- D:\<File name>.exe
- %HOMEPATH%\mdo16l.txt
- %TEMP%\pvd88b.iz6
- %HOMEPATH%\mdo16l.txt
- %TEMP%\autb3e1.tmp
- %TEMP%\pvd88b.iz6
- DNS ASK 4z##.no-ip.info