Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\KING.exe
- [<HKCU>\Software\Yahoo\Pager]
- %APPDATA%\DotNetZip-nbcgklzz.tmp
- %APPDATA%\DotNetZip-nbcgklzz.tmp в %APPDATA%\king.zip
- 'o.###buzz.com':5222
- 'sm##.gmail.com':587
- 'wp#d':80
- 'www.pr######roductionsllc.com':80
- www.pr######roductionsllc.com/yourip.php
- wp#d/wpad.dat
- DNS ASK o.###buzz.com
- DNS ASK sm##.gmail.com
- DNS ASK wp#d
- DNS ASK www.pr######roductionsllc.com