Technical Information
- %WINDIR%\userlist.exe (downloaded from the Internet)
- %WINDIR%\userlist.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\KL[1]
- 'www.br###eidona.com':80
- 'localhost':1035
- www.br###eidona.com/hot/KL
- DNS ASK www.br###eidona.com
- ClassName: 'Shell_TrayWnd' WindowName: ''