Technical Information
- '<SYSTEM32>\cmd.exe' /c <Current directory>\$$30689.bat
- <Current directory>\$$30689.bat
- %TEMP%\XCFMQYXHAMPB.zbc
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\yiun607[1].txt
- %TEMP%\XCFMQYXHAMPB.zbc
- 'ad##.cndwn.cn':80
- 'localhost':1035
- ad##.cndwn.cn/pages/yiun607.txt
- DNS ASK ad##.cndwn.cn
- ClassName: 'MS_WINHELP' WindowName: '(null)'