Technical Information
- <SYSTEM32>\MCItaNE.exe (downloaded from the Internet)
- <SYSTEM32>\Net_Empresa.exe (downloaded from the Internet)
- <SYSTEM32>\Orkuts.exe (downloaded from the Internet)
- <SYSTEM32>\Net_Empresa.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\MCItaNE[1].jpg
- <SYSTEM32>\MCItaNE.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\Orkuts[1].jpg
- <SYSTEM32>\Orkuts.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\Net_Empresa[1].jpg
- 'vi####lcards10.com':80
- 'localhost':1033
- vi####lcards10.com/Arquivos/MCItaNE.jpg
- vi####lcards10.com/Arquivos/Net_Empresa.jpg
- vi####lcards10.com/Arquivos/Orkuts.jpg
- DNS ASK vi####lcards10.com
- '10.#.1.1':1034