Technical Information
- %TEMP%\wtqivy2k
- http://www.pr#####massamartana.com/2n20tpkb
- http://www.pr#####massamartana.com/cgi-sys/suspendedpage.cgi
- http://vi###naero.com/goda4gvw
- http://gu####channel.it/523nw
- DNS ASK pr#####massamartana.com
- DNS ASK vi###naero.com
- DNS ASK gu####channel.it