Technical Information
- %HOMEPATH%\AvstScv.exe (downloaded from the Internet)
- %HOMEPATH%\AvstScv.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\novoklsk[1].exe
- 'wo####nickelmqt.com':80
- wo####nickelmqt.com/novoklsk.exe
- DNS ASK wo####nickelmqt.com