Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'dom' = '%ALLUSERSPROFILE%\Common Files\dom.exe'
- %TEMP%\yahoo.com.html
- %TEMP%\~DFE9AB.tmp
- '67.##5.160.76':443
- 'lo###.yahoo.net':443
- 'localhost':1035
- 's.##mg.com':443
- DNS ASK lo###.yahoo.net
- DNS ASK lo###.yahoo.com
- DNS ASK s.##mg.com
- DNS ASK us.##.yahoo.com
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''