Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe'
- 'ar.##host.net':80
- 'wp#d':80
- ar.##host.net/download/58257732/f08781825aced2baa014641c5826a8be498c6f6a/Server.exe
- wp#d/wpad.dat
- DNS ASK ar.##host.net
- DNS ASK wp#d