Technical Information
- %PROGRAM_FILES%\scrss.exe "%PROGRAM_FILES%\LL.ini" main
- %PROGRAM_FILES%\LL.ini
- %PROGRAM_FILES%\scrss.exe
- %PROGRAM_FILES%\14206.tmp
- %PROGRAM_FILES%\XX.ini
- from <Full path to virus> to %PROGRAM_FILES%\AN.EXE
- '70####634.3322.org':6000
- DNS ASK 70####634.3322.org