Technical Information
- '%HOMEPATH%\Desktop\FunshionInstall_C107836.exe'
- '%HOMEPATH%\Desktop\FunshionInstall_C107836.exe' (downloaded from the Internet)
- %HOMEPATH%\Desktop\FunshionInstall_C107836.exe
- 'do##.itv189.com':80
- do##.itv189.com/fs.asp
- do##.itv189.com/fs.txt
- DNS ASK do##.itv189.com