Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Popup.lnk
- %HOMEPATH%\local\MOBPOPUP.exe
- %HOMEPATH%\local\pc2msupp.dll
- %HOMEPATH%\local\PMAC95.DAT
- %TEMP%\YTCURKMLGI29SEV07D.tmp
- 'ki###xpw.net':443
- DNS ASK www.ki###xpw.net
- ClassName: 'EDIT' WindowName: ''
- '%HOMEPATH%\local\MOBPOPUP.exe'
- '<SYSTEM32>\cmd.exe' /k ipconfig /all > %temp%/YTCURKMLGI29SEV07D.tmp&netstat -ano >> %temp%/YTCURKMLGI29SEV07D.tmp&exit
- '<SYSTEM32>\ipconfig.exe' /all
- '<SYSTEM32>\netstat.exe' -ano