Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\guploader.exe
- %APPDATA%\avast\installer.exe
- http://po######iewer.serveftp.com/data/installer.exe
- http://co###ccounts.me/data/installer.exe
- DNS ASK po######iewer.serveftp.com
- DNS ASK co###ccounts.me
- '%APPDATA%\microsoft\windows\start menu\programs\startup\guploader.exe'