Technical Information
- '%TEMP%\Updata_list_2010.EXE'
- '<Current directory>\Up_tmp.exe'
- '%TEMP%\Updata_list_2010.EXE' (downloaded from the Internet)
- %TEMP%\Updata_list_2010.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\EXPL0RER[1].TXT
- <Current directory>\Up_tmp.exe
- <Current directory>\Up_tmp.exe
- 'ta####.lylwc.com':80
- 'localhost':1036
- ta####.lylwc.com/mm_16525014_0_0/Updata/EXPL0RER.TXT
- DNS ASK ta####.lylwc.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'Taobao_netking_master_1'