Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\xcwwxww.exe
- C:\xcwwxww\appdata\xcwwxww.exe
- http://on#######vices.freehosting.com/03/drafaela.txt
- DNS ASK go###e.com.br
- DNS ASK on#######vices.freehosting.com
- DNS ASK fr###osting.com