Technical Information
- <LS_APPDATA>\mqq3.exe (downloaded from the Internet)
- <LS_APPDATA>\mqq2.exe (downloaded from the Internet)
- <LS_APPDATA>\mqq1.exe (downloaded from the Internet)
- <LS_APPDATA>\mqq3.exe
- <LS_APPDATA>\mqq2.exe
- <LS_APPDATA>\mqq1.exe
- 'www.na###-etc.com':80
- www.na###-etc.com/images/xaxa3.gif
- www.na###-etc.com/images/xaxa2.gif
- www.na###-etc.com/images/xaxa1.gif
- DNS ASK www.na###-etc.com
- '<Private IP address>':1036