Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pvioqmms' = 'regsvr32.exe "%ALLUSERSPROFILE%\pvioqmms.dat"'
- %WINDIR%\explorer.exe
- iexplore.exe process, wininet.dll module
- firefox.exe process, nss3.dll module
- iexplore.exe process, advapi32.dll module
- firefox.exe process, advapi32.dll module
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- %ALLUSERSPROFILE%\pvioqmms.dat