Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Shortcut to startup_local.lnk
- <SYSTEM32>\netstat.exe with <SYSTEM32>\netstat.exe
- %WINDIR%\Explorer.EXE
- %TEMP%\<Virus name>.exe
- %TEMP%\tmp00000\ptewma.dll
- <SYSTEM32>\d3d9caps.dat
- <LS_APPDATA>\IECheck.exe
- <LS_APPDATA>\ws2help.PNF
- <LS_APPDATA>\msvcr.dll
- %WINDIR%\inf\1.DLL
- <LS_APPDATA>\IECheck.exe
- <LS_APPDATA>\ws2help.PNF
- <LS_APPDATA>\msvcr.dll
- %WINDIR%\inf\1.DLL
- from <SYSTEM32>\netstat.exe to <SYSTEM32>\9101
- 'any':80
- DNS ASK te##.#322.org.cn
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''