Technical Information
- '%TEMP%\wkw4D2.tmp'
- smc.exe
- outpost.exe
- ntvdm.exe
- ccapp.exe
- ZONEALARM.EXE
- zapro.exe
- fsav.exe
- Drwebupw.exe
- AVSYNMGR.EXE
- NAVAPW32.EXE
- MCAGENT.EXE
- GUARD.EXE
- %WINDIR%\Detroit.zip
- <SYSTEM32>\lzsys.sys
- %TEMP%\wkw4D2.tmp
- <SYSTEM32>\nCalc.exe
- 'www.ka##a.com':80
- http:/// via www.ka##a.com
- DNS ASK www.ka##a.com
- ClassName: 'Shell_TrayWnd' WindowName: ''