Technical Information
- '<Current directory>\Temp_CBA13DEF02.exe' 0
- '<Current directory>\Temp_CBA13DEF02.exe' (downloaded from the Internet)
- <Current directory>\Temp_CBA13DEF02.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\header2[1].php
- %TEMP%\~DFB9A.tmp
- 'se####.hit20.com':80
- 'localhost':1035
- se####.hit20.com/redict/NAB/header2.php
- DNS ASK se####.hit20.com