Technical Information
- <SYSTEM32>\cmd.exe /c %TEMP%\$ztkcgk345k.bat
- 360tray.exe
- %TEMP%\$ztkcgk345k.bat
- C:\T2.hiv
- C:\T1.hiv
- %TEMP%\<Virus name>tz.dll
- %TEMP%\<Virus name>tz.dll
- C:\T2.hiv
- C:\T1.hiv
- 'go.#ry8.com':80
- go.#ry8.com/images/12.gif
- DNS ASK go.#ry8.com
- DNS ASK go.##cool.com
- '<Private IP address>':1036
- ClassName: 'BUS-Wqbz' WindowName: ''
- ClassName: 'Q360SafeMonClass' WindowName: ''
- ClassName: 'KVXP_Monitor' WindowName: ''