Technical Information
- '' (downloaded from the Internet)
- %TEMP%\aut1.tmp
- %TEMP%\chksqvb
- %TEMP%\_upd\<File name>.exe
- %TEMP%\_upd\upd_start.bat
- %TEMP%\aut1.tmp
- %TEMP%\chksqvb
- from %TEMP%\_upd\<File name>.exe to <Full path to file>
- '51######.swh.strato-hosting.eu':80
- http://51######.swh.strato-hosting.eu/www/serverdienste/default.ini
- http://51######.swh.strato-hosting.eu/www/serverdienste/Login.exe
- DNS ASK 51######.swh.strato-hosting.eu
- DNS ASK re#####ert.dyndns.org
- '<Full path to file>'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\_upd\upd_start.bat
- '<SYSTEM32>\ping.exe' localhost -n 3