Technical Information
- <Current directory>\<Virus name>_1.exe (downloaded from the Internet)
- <Current directory>\<Virus name>_1.exe
- 'xc######ols.altervista.org':80
- xc######ols.altervista.org/loader/updated.exe
- xc######ols.altervista.org/loader/version.txt
- DNS ASK xc######ols.altervista.org
- ClassName: 'Shell_TrayWnd' WindowName: ''