Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'chrome.exe' = '%APPDATA%\zxc.exe'
- <Drive name for removable media>:\february_catalogue__2015.doc.qqqe
- <Drive name for removable media>:\read_me.txt
- %APPDATA%\xxccc.txt
- %APPDATA%\zxc.exe
- %APPDATA%\windows.txt
- %APPDATA%\read.txt
- %APPDATA%\asd3.txt
- %APPDATA%\asd4.txt
- %APPDATA%\destroyed.txt
- '%APPDATA%\zxc.exe'