Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\0ruBdAPdQ.lnk
- %APPDATA%\0ruBdAPdQ.exe
- 'wp#d':80
- 'cr#.###visdiamond.com':443
- 'op###birou.ro':443
- 'pa###bin.com':443
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK wp#d
- DNS ASK cr#.###visdiamond.com
- DNS ASK www.op###birou.ro
- DNS ASK pa###bin.com