Technical Information
To ensure autorun and distribution:
Creates the following services:
- [<HKLM>\SYSTEM\ControlSet001\Services\Mircosoft Framework NGEN v3.5.40868 X86] 'Start' = '00000002'
Modifies file system :
Creates the following files:
- %WINDIR%\Temp\my_ip.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\Current%20IP%20Check[1].htm
Network activity:
Connects to:
- 'ch####p.dyndns.org':80
- 'localhost':1036
TCP:
HTTP GET requests:
- ch####p.dyndns.org/Current%20IP%20Check.htm
UDP:
- DNS ASK ch####p.dyndns.org
