Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\hugtcajj.lnk
- <SYSTEM32>\tasks\opera scheduled autoupdate 4152911052
- %APPDATA%\microsoft\windows\hugtcajj\crtitcvi.exe
- %APPDATA%\microsoft\windows\hugtcajj\crtitcvi.exe
- 'ms###csi.com':80
- http://www.ms###csi.com/ncsi.txt
- DNS ASK zf##nt.ml
- DNS ASK zf##nt.tk
- DNS ASK zf##nt.ga
- DNS ASK zf##nt.cf
- DNS ASK zf##nt.gq