Technical Information
- <LS_APPDATA>\qo2.exe
- <LS_APPDATA>\qo3.exe
- <LS_APPDATA>\qo1.exe
- <LS_APPDATA>\qo3.exe (downloaded from the Internet)
- <LS_APPDATA>\qo1.exe (downloaded from the Internet)
- <LS_APPDATA>\qo2.exe (downloaded from the Internet)
- <LS_APPDATA>\qo2.exe
- <LS_APPDATA>\qo3.exe
- <LS_APPDATA>\history.txt
- <LS_APPDATA>\qo1.exe
- 'as###ster.fr':80
- as###ster.fr/.mix/p3.gif
- as###ster.fr/.mix/p2.gif
- as###ster.fr/.mix/p1.gif
- DNS ASK as###ster.fr
- '<Private IP address>':1036