Technical Information
- '' (downloaded from the Internet)
- %WINDIR%\AvastSvc.exe
- 'pl#####a.dothome.co.kr':80
- 'localhost':1039
- 'fi###.upload.pe':80
- http://pl#####a.dothome.co.kr/auth_list.txt
- http://pl#####a.dothome.co.kr/Status.txt
- http://fi###.upload.pe/download.php?na########################################
- DNS ASK pl#####a.dothome.co.kr
- DNS ASK fi###.upload.pe
- '%WINDIR%\AvastSvc.exe'