Technical Information
- [<HKLM>\System\CurrentControlSet\Services\ialdnwxf] 'ImagePath' = '<Current directory>\superec.ProcessMemory.sys'
- 'ialdnwxf' <Current directory>\superec.ProcessMemory.sys
- <Current directory>\superec.processmemory.sys
- %WINDIR%\temp\uddc532.tmp
- %WINDIR%\temp\uddc532.tmp
- 'dl.##ank.com':80
- http://dl.##ank.com/c0ewab68ll
- DNS ASK dl.##ank.com