Technical Information
- %TEMP%\a.doc
- 'me######amondresorts.com':80
- 'ra####tvriojana.tv':80
- 'jd##ve.com':80
- http://jd##ve.com/counter/?2
- http://mv###ding.net/counter/?2
- DNS ASK me######amondresorts.com
- DNS ASK ra####tvriojana.tv
- DNS ASK li#########ibe.cityguiabarranquilla.com
- DNS ASK nm###gion4.org
- DNS ASK so####ailing.com
- DNS ASK jd##ve.com
- DNS ASK ro####ndergarten.ro
- DNS ASK re#######s.springcreekranch.org
- DNS ASK mv###ding.net
- DNS ASK fi####sdigezt.com
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\a.doc"