Technical Information
- '%TEMP%\jacuy.exe'
- '%TEMP%\ycare.exe'
- '%TEMP%\jacuy.exe' (downloaded from the Internet)
- %TEMP%\jacuy.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1605UKmw[1].enc
- %TEMP%\ycare.exe
- 'ju#####nnercircle.com':80
- ju#####nnercircle.com/wp-content/uploads/2014/02/1605UKmw.enc
- DNS ASK ju#####nnercircle.com