Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.vbs
- <Drive name for removable media>:\<File name>.vbs
- '%TEMP%\rad678b4.exe'
- %TEMP%\rad678b4.exe
- %TEMP%\nsrf4c.tmp\iospecial.ini
- %TEMP%\nsrf4c.tmp\installoptions.dll
- %TEMP%\nsrf4c.tmp\modern-wizard.bmp
- %TEMP%\thinking_robot_log.txt
- 'ge########language.googleapis.com':443
- 'ge########language.googleapis.com':443
- DNS ASK ge########language.googleapis.com