Technical Information
- '<SYSTEM32>\net.exe' STOP DHCP
- %TEMP%\hacklist.tmp
- %TEMP%\hacklist.tmp
- http://mo#####e87.tripod.com/hacklist.TXT
- DNS ASK ho####dex.cwsurf.de
- DNS ASK mo#####e87.tripod.com
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Static' WindowName: ''
- '<SYSTEM32>\net.exe' STOP DHCP' (with hidden window)
- '<SYSTEM32>\net.exe' START DHCP' (with hidden window)
- '%WINDIR%\explorer.exe' http://ho####dex.cwsurf.de/index.php
- '<SYSTEM32>\net.exe' START DHCP
- '<SYSTEM32>\net1.exe' STOP DHCP
- '<SYSTEM32>\net1.exe' START DHCP