Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Protection' = '<Full path to virus>'
- <Current directory>\binternetNET9.8_17.22
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\setbug[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\stat_manuelle[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\setbug[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\stat_automatique[1]
- 'fw.#####de-chat-gratuit.com':80
- 'localhost':1038
- fw.#####de-chat-gratuit.com/winternet/stat_manuelle/
- fw.#####de-chat-gratuit.com/setbug
- fw.#####de-chat-gratuit.com/binternet/test/setbug.php
- fw.#####de-chat-gratuit.com/winternet/stat_automatique/
- DNS ASK fw.#####de-chat-gratuit.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''