Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'exexc10' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1001' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1004' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1200' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1201' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1405' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2201' = '00000000'
- 'wp#d':80
- 'ku##er.com':80
- http://11#.#11.111.1/wpad.dat via wp#d
- http://ku##er.com/advnew/d07.txt
- DNS ASK wp#d
- DNS ASK ku##er.com