Technical Information
- <Current directory>\<Virus name>.new.exe /update "<Full path to virus>"
- <Current directory>\<Virus name>.new.exe (downloaded from the Internet)
- <Current directory>\<Virus name>.new.exe
- 'up####r.lexod.com':80
- up####r.lexod.com/lexod.exe
- DNS ASK up####r.lexod.com
- '<Private IP address>':1035
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''