Technical Information
- '<Current directory>\a.exe'
- '<Current directory>\a.exe' (downloaded from the Internet)
- <Current directory>\a.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\post[1].php
- 'no##9.biz':80
- 'localhost':1036
- no##9.biz/myy/post.php?e=###
- DNS ASK no##9.biz