Technical Information
- '<SYSTEM32>\cmd.exe' /c del <Full path to virus> > nul
- 'fa###ook.com':80
- 'pr####mfaculty.com':80
- http://fa###ook.com/
- http://pr####mfaculty.com/?mo#################
- http://pr####mfaculty.com/?mo#############
- DNS ASK ASK fa###ook.com
- DNS ASK ASK pr####mfaculty.com