Technical Information
- [<HKLM>\System\CurrentControlSet\Services\UxSms] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Themes] 'Start' = '00000002'
- <Current directory>\skin.dll
- C:\softxlic.ini
- <Current directory>\skin.dll
- from <Full path to file> to <Current directory>\3ihljh.exe
- 'kk.##bbr.com':80
- http://kk.##bbr.com/kss_io/io.php?v=###########################################
- DNS ASK kk.##bbr.com