Technical Information
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1806' = '00000000'
- %TEMP%\wqb..bat
- DNS ASK w3###ools.com
- DNS ASK li##ro.it
- DNS ASK ca###rive.in
- DNS ASK sk###resorts.in
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Wqb..bat" > nul 2> nul' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Wqb..bat" > nul 2> nul