Technical Information
- '%TEMP%\kilf1.exe'
- '%TEMP%\budha.exe'
- '%TEMP%\kilf1.exe' (downloaded from the Internet)
- %TEMP%\kilf1.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\al2701[1].enc
- %TEMP%\budha.exe
- 're###aks.co.uk':80
- re###aks.co.uk/images/al2701.enc
- DNS ASK re###aks.co.uk