Technical Information
- <Current directory>\MemoThisPOP.exe
- <Current directory>\MemoThisPOP.exe (downloaded from the Internet)
- <Current directory>\<Virus name>.ini
- <Current directory>\MemoThisPOP.exe
- 'www.ad###com.com':80
- 'cl####.additcom.com':80
- www.ad###com.com/install_memothis/?ci###################################
- cl####.additcom.com/download/MemoThisPOP.zip
- cl####.additcom.com/download/MemoThisPOP.html
- DNS ASK www.ad###com.com
- DNS ASK cl####.additcom.com
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''