Technical Information
- %TEMP%\a.doc
- 'ri###sti.com':80
- 'jd##ve.com':80
- http://jd##ve.com/counter/?2
- http://mv###ding.net/counter/?2
- DNS ASK ri###sti.com
- DNS ASK mi####n-driven.co
- DNS ASK so####ailing.com
- DNS ASK jd##ve.com
- DNS ASK ro####ndergarten.ro
- DNS ASK re#######s.springcreekranch.org
- DNS ASK mv###ding.net
- DNS ASK fi####sdigezt.com
- '%ProgramFiles%\microsoft office\office14\winword.exe' /n "%TEMP%\a.doc"