Technical Information
Malicious functions:
To complicate detection of its presence in the operating system,
blocks the following features:
- User Account Control (UAC)
Network activity:
Connects to:
- 'pa##e.is':443
- 'a.##ns.net':80
- 'wp#d':80
TCP:
HTTP GET requests:
- http://a.##ns.net/divviq_nUBfXjOr.jpg
- http://11#.#11.111.1/wpad.dat via wp#d
UDP:
- DNS ASK pa##e.is
- DNS ASK a.##ns.net
- DNS ASK wp#d
