Technical Information
- <Full path to virus>
- %TEMP%\3.tmp
- <DRIVERS>\9S54ylqacD1.sys
- %TEMP%\1.tmp
- %TEMP%\2.tmp
- %TEMP%\3.tmp
- <DRIVERS>\9S54ylqacD1.sys
- %TEMP%\1.tmp
- %TEMP%\2.tmp
- 'ai.##lo99.com':80
- DNS ASK ai.##lo99.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'