Technical Information
- '<SYSTEM32>\regsvr32.exe' <SYSTEM32>\dm.dll /s
- <SYSTEM32>\dm.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bbs.waig8[1]
- <SYSTEM32>\PastUHY3z.sys
- <SYSTEM32>\BackInC.sys
- <SYSTEM32>\BackInC.sys
- <SYSTEM32>\PastUHY3z.sys
- 'www.wa##8.com':80
- 'bb#.#aig8.com':80
- 'localhost':1036
- www.wa##8.com/banben.txt
- bb#.#aig8.com/
- DNS ASK www.wa##8.com
- DNS ASK bb#.#aig8.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'