Technical Information
- %APPDATA%\by.exe (downloaded from the Internet)
- %APPDATA%\by.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\inf3[1].e
- %TEMP%\~DFA15F.tmp
- 'fi###h00.com':80
- 'localhost':1035
- fi###h00.com/v7/oo/inf3.e
- DNS ASK fi###h00.com
- '<Private IP address>':1036