Technical Information
To ensure autorun and distribution
Creates or modifies the following files
- %WINDIR%\tasks\bidaily synchronize task[3c32].job
- <SYSTEM32>\tasks\bidaily synchronize task[3c32]
Modifies file system
Creates the following files
- %ALLUSERSPROFILE%\{ffe06d82-8035-0271-ffe0-06d82803b60a}\hqghumeaylnlf.exe
- %ALLUSERSPROFILE%\{ffe06d82-8035-0271-ffe0-06d82803b60a}\hqghumeaylnlf.dat
- %TEMP%\optprosetup.exe
- %TEMP%\is-3dk47.tmp\optprosetup.tmp
- %TEMP%\is-accpo.tmp\_isetup\_setup64.tmp
- %TEMP%\is-accpo.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-accpo.tmp\optprohelper.dll
- %TEMP%\is-accpo.tmp\itdownload.dll
- %TEMP%\is-accpo.tmp\optpromon.dll
Network activity
Connects to
- 'google.com':80
UDP
- DNS ASK google.com
- DNS ASK op###izepro.biz
- DNS ASK op###izerpro.co
- DNS ASK op####zepro.info
- DNS ASK op###izepro.org
Miscellaneous
Creates and executes the following
- '%TEMP%\optprosetup.exe' /MMJS /insid=1383424179666248295 /EID %ALLUSERSPROFILE%\{ffe06d82-8035-0271-ffe0-06d82803b60a}\hqghumeaylnlf.exe
- '%TEMP%\is-3dk47.tmp\optprosetup.tmp' /SL5="$E0162,5603039,115200,%TEMP%\optprosetup.exe" /MMJS /insid=1383424179666248295 /EID %ALLUSERSPROFILE%\{ffe06d82-8035-0271-ffe0-06d82803b60a}\hqghumeaylnlf.exe
