Technical Information
Modifies file system :
Creates the following files:
- %TEMP%\1F0C3.dmp
- %TEMP%\dw.log
Network activity:
Connects to:
- 'www.mb##.com':80
TCP:
HTTP GET requests:
- www.mb##.com/lnk.asp?o=#####################
UDP:
- DNS ASK www.mb##.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: ''
