Technical Information
- 'C:\system\charm\CHARM.exe'
- 'C:\system\charm\CHARM.exe' (downloaded from the Internet)
- <Current directory>\charmer.txt
- C:\system\charm\CHARM.exe
- %TEMP%\~DFE9E7.tmp
- 'ch###.bizfxr.com':80
- ch###.bizfxr.com/CHARM.exe?RN###########
- ch###.bizfxr.com/count.asp?RN##################
- DNS ASK ch###.bizfxr.com