Technical Information
- '%APPDATA%\IfgxTrayy.exe'
- '%APPDATA%\IfgxTrayy.exe' (downloaded from the Internet)
- %APPDATA%\IfgxTrayy.exe
- %APPDATA%\Interop.IWshRuntimeLibrary.dll
- 'pt###login.com':80
- 'wp#d':80
- http://pt###login.com/KL%20DEVELOPER/LOADER+DLL/1.mp3
- http://pt###login.com/KL%20DEVELOPER/LOADER+DLL/dll.dll
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK pt###login.com
- DNS ASK wp#d