Technical Information
- '<Full path to virus>'
- '<Full path to virus>' (downloaded from the Internet)
- <Full path to virus>
- from <Full path to virus> to <Full path to virus>.old
- 'up####.thucson3d.com':80
- up####.thucson3d.com/auto/down
- up####.thucson3d.com/auto/ver
- DNS ASK up####.thucson3d.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'