Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'skype' = '"c:\skype.exe"'
- hidden files
- Registry Editor (RegEdit)
- User Account Control (UAC)
- %TEMP%\a2.dll
- http://pa###bin.com/
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK pa###bin.com
- DNS ASK microsoft.com