Technical Information
- %WINDIR%\Explorer.EXE
- %TEMP%\~!#6.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\viewtopic[2].php
- %TEMP%\~!#5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\viewtopic[2].php
- %TEMP%\~!#7.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\viewtopic[3].php
- %TEMP%\~!#9.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\viewtopic[2].php
- %TEMP%\~!#8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\viewtopic[1].php
- %TEMP%\~!#2.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\viewtopic[1].php
- %TEMP%\~!#1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\viewtopic[1].php
- %TEMP%\~!#4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\viewtopic[2].php
- %TEMP%\~!#3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\viewtopic[1].php
- 'rb###ld.osa.pl':80
- rb###ld.osa.pl/forum/viewtopic.php?f=#############################################
- rb###ld.osa.pl/forum/viewtopic.php?f=############################################
- DNS ASK rb###ld.osa.pl
- '<Private IP address>':1036