Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<Virus name>.exe' = '<SYSTEM32>\<Virus name>.exe'
- User Account Control (UAC)
- <SYSTEM32>\<Virus name>.exe
- <SYSTEM32>\server.cfg
- <SYSTEM32>\<Virus name>.exe
- 'cl###.kicks-ass.net':3010
- 'cl###.kicks-ass.net':4001
- 'cl###.kicks-ass.org':80
- cl###.kicks-ass.org/server.cfg
- DNS ASK cl###.kicks-ass.net
- DNS ASK cl###.kicks-ass.org