Technical Information
- <Current directory>\szBin.exe (downloaded from the Internet)
- <Current directory>\szBin.exe
- 'no###irus.net':80
- 'wp#d':80
- no###irus.net/adm/a/d/m/core/admin_uploads/Killer.exe
- wp#d/wpad.dat
- DNS ASK no###irus.net
- DNS ASK wp#d
- '<Private IP address>':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''