Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'iexplore' = '<Full path to file>'
- <Current directory>\~$temp.doc
- <Current directory>\~$temp.doc
- DNS ASK ec######.dyndns-office.com
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "<Current directory>\~$temp.doc"