Technical Information
- '%TEMP%\System32\mmc.exe'
- '%TEMP%\System32\mmc.exe' (downloaded from the Internet)
- '<SYSTEM32>\schtasks.exe' /create /tn "pppp" /xml "<Current directory>\sss.xml" /ru "SYSTEM"
- '<SYSTEM32>\schtasks.exe' /delete /tn "pppp" /f
- <Current directory>\sss.xml
- <Current directory>\autorun.bat
- %TEMP%\System32\mmc.exe
- <Current directory>\sss.xml
- '69##x82.com':80
- http://69##x82.com/CloneFile/apss32.dll6
- DNS ASK 69##x82.com