Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\Host Process for Windows.vbs
- %TEMP%\h2r2.tmp
- %TEMP%\h2r1.tmp
- %TEMP%\h2r1.tmp
- 'localhost':1041
- 'fu##it.cf':80
- 'wp#d':80
- '74.##5.232.51':80
- http://fu##it.cf/up/Server_Fuded_yWpTz.txt
- http://www.google.com/ via 74.##5.232.51
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK fu##it.cf
- DNS ASK www.google.com
- DNS ASK wp#d
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''