Technical Information
- <SYSTEM32>\cmd.exe /c <Current directory>\\rrr.bat
- <SYSTEM32>\spoolsv.exe
- <Current directory>\rrr.bat
- %WINDIR%\Temp\~32619.tmp
- <Current directory>\about:blank
- <SYSTEM32>\prtsched.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\icon[1].html
- %WINDIR%\Temp\~32619.tmp
- 'ma##.#indomnet.com':80
- 'ma##.pacisp.net':80
- ma##.pacisp.net/mail/icon.html?p2################
- ma##.#indomnet.com/mail/selfmenu.html
- DNS ASK ma##.#indomnet.com
- DNS ASK ma##.pacisp.net
- '<Private IP address>':1037
- '<Private IP address>':1036
- ClassName: '' WindowName: 'about:blank'