Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Trade Manager' = '%APPDATA%\AliTray\AliTray.exe'
- %WINDIR%\syswow64\notepad.exe
- launcher.exe
- %APPDATA%\alitray\alitray.exe
- DNS ASK be####370.myftp.org
- '%ProgramFiles(x86)%\opera\launcher.exe'
- '%WINDIR%\syswow64\notepad.exe'