Technical Information
- %TEMP%\~nsu.tmp\au_.exe
- %TEMP%\nscfd71.tmp\killprocdll.dll
- %TEMP%\nscfd71.tmp\commdll.dll
- %TEMP%\nscfd71.tmp\commdll.dll
- %TEMP%\nscfd71.tmp\killprocdll.dll
- 'dc.#etv.com':80
- DNS ASK dc.#etv.com
- '%TEMP%\~nsu.tmp\au_.exe' _?=<Current directory>\