Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\dukaku.lnk
- %ALLUSERSPROFILE%\Application Data\dukaku\dukaku.exe
- 'wp#d':80
- 'me##ync.com':80
- http://11#.#11.111.2/wpad.dat via wp#d
- http://me##ync.com/main/julyten/energystar/PingPong.php
- DNS ASK me##ync.com
- DNS ASK wp#d
- '%ALLUSERSPROFILE%\Application Data\dukaku\dukaku.exe' and Settings\\All Users\\Application Data\\dukaku\\dukaku.exe\"