Technical Information
- <SYSTEM32>\notepad.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pingnt[1].jpg
- <SYSTEM32>\pingits.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\pingits[1].jpg
- <SYSTEM32>\pingkil.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\pingkil[1].jpg
- <SYSTEM32>\pingnt.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\pingrel[1].jpg
- <SYSTEM32>\pingweb.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pingweb[1].jpg
- <SYSTEM32>\pingwab.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pingwab[1].jpg
- <SYSTEM32>\pingrel.jpg
- <Full path to virus>
- 'www.we###exo.com.br':80
- 'localhost':1036
- www.we###exo.com.br/imagens/pingits.jpg
- www.we###exo.com.br/imagens/pingnt.jpg
- www.we###exo.com.br/imagens/pingkil.jpg
- www.we###exo.com.br/imagens/pingweb.jpg
- www.we###exo.com.br/imagens/pingrel.jpg
- www.we###exo.com.br/imagens/pingwab.jpg
- DNS ASK www.we###exo.com.br
- '<Private IP address>':1037
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''