Technical Information
- Windows Task Manager (Taskmgr)
- Registry Editor (RegEdit)
- User Account Control (UAC)
- %TEMP%\dw.log
- %TEMP%\2E16D.dmp
- 'wp#d':80
- 'ip##ho.net':80
- 'st###.#teampowered.com':443
- http://11#.#11.111.1/wpad.dat via wp#d
- http://ip##ho.net/plain
- DNS ASK wp#d
- DNS ASK ip##ho.net
- DNS ASK st###.#teampowered.com
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1124