Technical Information
- hidden files
- %TEMP%\22CB.temp
- %TEMP%\001fa84.tmp
- %TEMP%\22CB.temp (downloaded from the Internet)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\jc928xx[1].txt
- %TEMP%\22CB.temp
- %WINDIR%\usp10.dll
- %TEMP%\001fa84.tmp
- 'tj###2.h5gy.com':80
- 'bb#.#bzdztw.com':80
- tj###2.h5gy.com/tj1012/post.asp?d1####################################################
- bb#.#bzdztw.com/110/jc928xx.txt
- DNS ASK tj###2.h5gy.com
- DNS ASK bb#.#bzdztw.com