Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\_cxmbnp8_.lnk
- %APPDATA%\microsoft\windows\start menu\programs\startup\_cxmbnp8_ex.lnk
- %APPDATA%\microsoft\windows\start menu\programs\startup\_cxmbnp8_y.lnk
- C:\_cxmbnp8_\bcntpppmewlr
- C:\users\public\bcntpppmewlr.cmd
- C:\_cxmbnp8_\bcntpppmewlry
- C:\users\public\bcntpppmewlry.cmd
- C:\users\public\310522
- C:\_cxmbnp8_\_cxmbnp8_._cxmbnp8_
- '17#.#05.111.154':80
- http://17#.#05.111.154/a1a/d1/m.zip