Technical Information
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\mscmos.sys
- %WINDIR%\fxsst.dll
- <SYSTEM32>\srvlic.dll
- from <Full path to virus> to %TEMP%\3.tmp
- 'zd####5.3322.org':80
- zd####5.3322.org/default.asp?4a###############################
- DNS ASK zd####5.3322.org