Technical Information
- %WINDIR%\Tasks\{7B75138C-E213-D060-4943-4BCABEE165F7}.job
- %APPDATA%\xLzGghmn\VOlkXlCE\KiLfUoPo\gXJasmfmM.exe
- 'li###t338.com':80
- 'li###reedns.com':80
- 'so##.#cssoft.biz':80
- 'li#####cksreport.com':80
- http://li###t338.com/netreport.php
- http://li###reedns.com/netreport.php
- http://so##.#cssoft.biz/netreport.php
- http://li#####cksreport.com/netreport.php
- DNS ASK li###t338.com
- DNS ASK li###reedns.com
- DNS ASK so##.#cssoft.biz
- DNS ASK li#####cksreport.com
- '%APPDATA%\xLzGghmn\VOlkXlCE\KiLfUoPo\gXJasmfmM.exe'