Technical Information
- %TEMP%\orvvvobb1
- %TEMP%\orvvvobb2
- %TEMP%\orvvvobb3
- http://ho#####f-quality.com/487ygfh?OR###############
- http://lu####livingph.com/487ygfh?OR###############
- http://ma#####ngnatural.net/487ygfh?OR###############
- DNS ASK ho#####f-quality.com
- DNS ASK lu####livingph.com
- DNS ASK ma#####ngnatural.net
- DNS ASK ca###trove.net
- DNS ASK re###orn.net