Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\ .lnk
- %WINDIR%s\2.ico
- %WINDIR%s\From.doc
- %WINDIR%s\Tem.exe
- %TEMP%\ms1315.tmp
- %APPDATA%\smss.exe
- 'sk###.servemp3.com':12000
- DNS ASK sk###.servemp3.com
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'WordPadClass' WindowName: ''
- '%WINDIR%s\Tem.exe'
- '%APPDATA%\smss.exe'
- '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "%WINDIR%s\From.doc"