Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\<File name>.lnk
- 'av###ilm.com.ua':80
- 'my##ms.org':443
- 'ar##st.ba':80
- 'mo###club.gr':80
- 'fe#.#nicamp.br':80
- 'er##lain.lv':80
- 'pr######.etudoshop.com.br':80
- http://www.av###ilm.com.ua/forum/files/.../strings.txt via av###ilm.com.ua
- http://ar##st.ba/artistnovi/administrator/excel/strings.txt
- http://www.mo###club.gr/market/oc-includes/json/strings.txt via mo###club.gr
- http://www.fe#.#nicamp.br/arqs/pos/homologa/strings.txt via fe#.#nicamp.br
- http://www.er##lain.lv/flash/megazine3/megazine/gui/engine/strings.txt via er##lain.lv
- http://pr######.etudoshop.com.br/images/flash/_notes/strings.txt
- DNS ASK www.av###ilm.com.ua
- DNS ASK www.my##ms.org
- DNS ASK ar##st.ba
- DNS ASK www.mo###club.gr
- DNS ASK www.fe#.#nicamp.br
- DNS ASK www.er##lain.lv
- DNS ASK pr######.etudoshop.com.br