Sets the 'hidden' attribute to the following files:
%WINDIR%\hpm2.dat
Deletes the following files:
C:\2.reg
<Current directory>\sd.dat
Deletes itself.
Network activity:
Connects to:
'<Private IP address>':80
TCP:
HTTP GET requests:
<Private IP address>/fr/first.php?f=#############################################################################################################################