Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\360zhudong2.1.5.lnk
- <Current directory>\jiangyiguosharuanziqidong.lnk
- <Full path to virus>
- <Current directory>\jiangyiguosharuanziqidong.lnk
- 'zc####10.vicp.cc':6789
- 'ip.#322.net':80
- ip.#322.net/
- DNS ASK zc####10.vicp.cc
- DNS ASK ip.#322.net