Technical Information
- http://www.ba##u.com/
- http://ne###n.th51.com/chushihua/yinqingpt.txt
- http://ci.#h51.com/ping361.txt
- http://ci.#h51.com/xing361.txt
- http://ne###n.th51.com/xinyun/pt/mtkan.php?ur##
- http://he##.th51.com/?3.###
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ba##u.com
- DNS ASK ne###n.th51.com
- DNS ASK ci.#h51.com
- DNS ASK he##.th51.com
- DNS ASK hu###omains.com
- DNS ASK microsoft.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%WINDIR%\syswow64\regsvr32.exe' /s npmtkanpp.dll' (with hidden window)
- '%WINDIR%\syswow64\regsvr32.exe' /s npmtkanpp.dll