Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'long' = '%WINDIR%\<File name>.exe'
- '<SYSTEM32>\cmd.exe' /c del "<Full path to file>"
- '%WINDIR%\<File name>.exe'
- %WINDIR%\<File name>.exe
- %WINDIR%\<File name>.exe
- 'yk.##unsc.com':661
- 'yk.##unsc.com':6611
- DNS ASK yk.##unsc.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''