Technical Information
- C:\mh2.exe
- C:\mh2.exe (downloaded from the Internet)
- C:\mh2.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mh2[1].txt
- 'wo######fan.ns1.v588.com':80
- 'localhost':1036
- wo######fan.ns1.v588.com/mh2.txt
- DNS ASK wo######fan.ns1.v588.com
- ClassName: '' WindowName: 'Windows ??????????'