Technical Information
Modifies file system :
Creates the following files:
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\zz[1].php
- %WINDIR%\server.txt
- %TEMP%\aut1.tmp
- %TEMP%\mquwuin
Deletes the following files:
- %TEMP%\mquwuin
- %TEMP%\aut1.tmp
Network activity:
Connects to:
- 'ka####12.22web.net':80
TCP:
HTTP GET requests:
- ka####12.22web.net/zz.php
UDP:
- DNS ASK ka####12.22web.net
