Technical Information
- %TEMP%\nstc1f0.tmp
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nszc480.tmp
- http://www.of###crowd.com/uninstall.php
- DNS ASK of###crowd.com
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe' "http://www.of###crowd.com/uninstall.php"