Technical Information
- '%TEMP%\tmpic.exe'
- '%TEMP%\cemos.exe'
- '%TEMP%\tmpic.exe' (downloaded from the Internet)
- %TEMP%\tmpic.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\2804USmm[1].dat
- %TEMP%\cemos.exe
- 'ka##nltd.ca':80
- ka##nltd.ca/css/blueprint/2804USmm.dat
- DNS ASK ka##nltd.ca