Technical Information
- %TEMP%\a.doc
- 'da######d.pplusglobal.com':80
- 'sp#####lifecuisine.com':80
- 'ri###sti.com':80
- 'jd##ve.com':80
- http://jd##ve.com/counter/?2
- http://mv###ding.net/counter/?2
- DNS ASK ph#####weddingbands.com
- DNS ASK da######d.pplusglobal.com
- DNS ASK sp#####lifecuisine.com
- DNS ASK ri###sti.com
- DNS ASK so####ailing.com
- DNS ASK jd##ve.com
- DNS ASK ro####ndergarten.ro
- DNS ASK re#######s.springcreekranch.org
- DNS ASK mv###ding.net
- DNS ASK fi####sdigezt.com
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\a.doc"