Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\ibibtccw.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 3703268765
- %APPDATA%\microsoft\windows\ibibtccw\uhtrtttu.exe
- %APPDATA%\microsoft\windows\ibibtccw\uhtrtttu.exe
- 'ms###csi.com':80
- 'xm###ost.bit':80
- DNS ASK xm###ost.bit
- '%WINDIR%\syswow64\explorer.exe'
- '%WINDIR%\explorer.exe'