Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- %TEMP%\nsxd6fe.tmp\uac.dll
- %TEMP%\nsxd6fe.tmp\system.dll
- %TEMP%\nsxd6fe.tmp\math.dll
- %WINDIR%\syswow64\vd--3tykt.dll
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\1244848
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\1239783
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3150914307-1777937420-491476919-1000\a02ef6c56fcef0a45889dd1f43c4c24b_d99ef00b-ccd3-4f1d-9980-90ac453b0b47
- %TEMP%\nsxd6fe.tmp\nscfe6c.tmp
- %WINDIR%\syswow64\w-j--c3sl0f0.exe
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\1244848
- %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\1239783
- %TEMP%\nsxd6fe.tmp\math.dll
- %TEMP%\nsxd6fe.tmp\nscfe6c.tmp
- %TEMP%\nsxd6fe.tmp\system.dll
- %TEMP%\nsxd6fe.tmp\uac.dll
- DNS ASK fp.###premier.com