Technical Information
- [HKLM\System\CurrentControlSet\Services\QQВЈВє306189440] 'ImagePath' = '<Current directory>\jinfuhide.dat'
- 'QQВЈВє306189440' <Current directory>\jinfuhide.dat
- %WINDIR%\kb2639418.log
- <Current directory>\hook.dll
- <Current directory>\jinfuhide.dat
- %WINDIR%\temp\udd70ac.tmp
- <Current directory>\jinfuhide.dat
- %WINDIR%\temp\udd70ac.tmp
- DNS ASK 59##kk.com
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "<Full path to file>"