Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Service Manager' = '%TEMP%\serviceManager.scr'
- '%TEMP%\serviceManager.scr'
- %APPDATA%\DXWXWRK.tmp
- %APPDATA%\DXWRK.html
- %TEMP%\serviceManager.scr
- 'ft#.##ytector.com':21
- 'my####rnalip.com':80
- http://my####rnalip.com/raw
- DNS ASK ft#.##ytector.com
- DNS ASK my####rnalip.com
