Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\windows updater.exe
- %TEMP%\screen.jpg
- http://ip#####.#hatismyipaddress.com/
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK ip#####.#hatismyipaddress.com
- DNS ASK di###rdapp.com
- DNS ASK microsoft.com