Technical Information
- '%WINDIR%\explorer.exe'
- %WINDIR%\explorer.exe
- [<HKCU>\Software\Microsoft\Internet Account Manager]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\news[1].htm
- %TEMP%\setting.DXi
- %TEMP%\feed135435267.rss+xml
- 'gu####rialand.asia':80
- http://gu####rialand.asia/news.php
- DNS ASK gu####rialand.asia
- ClassName: 'hundred' WindowName: ''
- ClassName: 'reproductions' WindowName: ''