Technical Information
- '%TEMP%\WLIDSVC.EXE' (downloaded from the Internet)
- '%TEMP%\WLIDSVC.EXE'
- %TEMP%\WLIDSVC.EXE
- 'mo###.flnet.org':80
- 'localhost':1036
- http://mo###.flnet.org/img/update.php
- DNS ASK mo###.flnet.org
- ClassName: 'Shell_TrayWnd' WindowName: ''