Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\whegserr.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 2824836542
- %APPDATA%\microsoft\windows\whegserr\iatdjsbr.exe
- %APPDATA%\microsoft\windows\whegserr\iatdjsbr.exe
- 'ms###csi.com':80
- 'wi####urlife.com':80
- 'wi####urlife.com':443
- http://www.ms###csi.com/ncsi.txt
- http://wi####urlife.com/
- 'wi####urlife.com':443
- DNS ASK my####dempty.com
- DNS ASK qi###mpty.com
- DNS ASK wi####urlife.com
- DNS ASK st##to.de
- DNS ASK cl###empydn.com