Technical Information
- '<SYSTEM32>\cmd.exe' /c <Current directory>\$$30689.bat
- <Current directory>\$$30689.bat
- %TEMP%\FJAMGAYZMQC.zbc
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\NewTim[1].txt
- %TEMP%\FJAMGAYZMQC.zbc
- 'www.go##265.cn':80
- 'localhost':1037
- www.go##265.cn/cfg/NewTim.txt
- DNS ASK www.go##265.cn