Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\474e2xxd.url
- %APPDATA%\shellcomponents\5mmkzxcc.vbs
- %APPDATA%\shellcomponents\sxstrace.exe
- %APPDATA%\remcos\logs.dat
- DNS ASK fa####l.duckdns.org
- DNS ASK fr####l.dynu.net
- DNS ASK ta####l.hopto.org