Technical Information
- '%HOMEPATH%\contacts\defupdate95.exe' //E:jscript %TEMP%\querylog.txt
- %TEMP%\querylog.txt
- %HOMEPATH%\contacts\defupdate95.exe
- %TEMP%\querylog.txt
- 'bi###pdate.com':443
- DNS ASK bi###pdate.com
- '%HOMEPATH%\contacts\defupdate95.exe' //E:jscript %TEMP%\querylog.txt' (with hidden window)