Technical Information
- <SYSTEM32>\systray.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\svchost.exe
- pidgin.exe
- ICQ.exe
- skype.exe
- YahooMessenger.exe
- trillian.exe
- firefox.exe
- chrome.exe
- iexplore.exe
- safari.exe
- opera.exe
- %APPDATA%\SYRPSVT\a44444.xml
- %APPDATA%\SYRPSVT\SYRPSVT.exe
- <SYSTEM32>\svchost.exe
- %APPDATA%\SYRPSVT\a44444.xml
- '<SYSTEM32>\systray.exe'
- '<SYSTEM32>\cmd.exe' del "<SYSTEM32>\svchost.exe"
- '<SYSTEM32>\schtasks.exe' /Create /TN "SYRPSVT\SYRPSVT" /XML "%APPDATA%\SYRPSVT\a44444.xml"
- '<SYSTEM32>\svchost.exe'