Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\iG2x8VvEOD.eu.url
- %TEMP%\o49.It
- %TEMP%\aut1.tmp
- %APPDATA%\iG2x8VvEOD\iG2x8VvEOD.exe
- %TEMP%\aut1.tmp
- 'localhost':1039
- 'wh#####lly.revcode.eu':80
- http://wh#####lly.revcode.eu/recv3.php
- DNS ASK wh#####lly.revcode.eu