Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1806' = '00000000'
- %TEMP%\fwz..bat
- nul
- DNS ASK ni###ideo.jp
- DNS ASK ka###n001.com
- DNS ASK sk###lice.in
- DNS ASK rh##en.in
- DNS ASK ed##opia.in
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Fwz..bat" > nul 2> nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Fwz..bat" > nul 2> nul