Technical Information
- %TEMP%\dld2.tmp
- %TEMP%\dld2.tmp (downloaded from the Internet)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt_sdldr[1].php
- %TEMP%\dld2.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt_forsplp[1].php
- %TEMP%\dld1.tmp
- '21#.#55.29.144':80
- 'localhost':1035
- 21#.#55.29.144/stuff/bt_sdldr.php
- 21#.#55.29.144/stuff/bt_forsplp.php?n=##########################