Technical Information
Modifies file system :
Creates the following files:
- <SYSTEM32>\d3d9caps.tmp
- <SYSTEM32>\d3d9caps.dat
Deletes the following files:
- <SYSTEM32>\d3d9caps.dat
Moves the following files:
- from <SYSTEM32>\d3d9caps.tmp to <SYSTEM32>\d3d9caps.dat
Network activity:
Connects to:
- 'wp#d':80
- 'mt##x.com':443
- 'localhost':1035
- '50##c.com':443
TCP:
HTTP GET requests:
- wp#d/wpad.dat
UDP:
- DNS ASK mt##x.com
- DNS ASK wp#d
- DNS ASK 50##c.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'SysListView32' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
