Technical Information
- %TEMP%\2b492.tmp
- %WINDIR%\zsb.dll
- %TEMP%\29168.tmp
- %TEMP%\2aaae.tmp
- %WINDIR%\zsb.dll
- %TEMP%\2b492.tmp
- %TEMP%\2aaae.tmp
- %TEMP%\29168.tmp
- 'zc.##hezi.com':80
- zc.##hezi.com/jianche.txt
- DNS ASK zc.##hezi.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'