Technical Information
- <Drive name for removable media>:\sexy.scr
- hidden files
- '%PROGRAMDATA%\sexy1.exe'
- %PROGRAMDATA%\sexy1.exe
- %PROGRAMDATA%\sexy.scr
- %PROGRAMDATA%\startup.vbs
- %PROGRAMDATA%\update.vbs
- %PROGRAMDATA%\traffic.exe
- %PROGRAMDATA%\startup.vbs
- %PROGRAMDATA%\update.vbs
- http://be#####echnology.xyz/sexy1.exe
- DNS ASK be#####echnology.xyz
- ClassName: 'EDIT' WindowName: ''