Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{4572DCDB-F01C-44C9-256B-1E83A1401542}] 'StubPath' = '<Полный путь к вирусу>'
- 'hq#####r.cabmrec.com':80
- hq#####r.cabmrec.comhttp://hqcenter.cabmrec.com:80/index.php
- DNS ASK hq#####r.cabmrec.com