Technical Information
- C:\xl.exe
- C:\xl.exe (downloaded from the Internet)
- C:\xl.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\l[1].bin
- 'sa####ra.envy.nu':80
- 'localhost':1035
- sa####ra.envy.nu/l.bin
- DNS ASK sa####ra.envy.nu