Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WAU' = '"<SYSTEM32>\wauctls.exe" -update'
- <SYSTEM32>\wauctls.exe
- DNS ASK www.ma##ame7.kr
- DNS ASK www.wi##ame.cc
- DNS ASK wi##ame.cc
- DNS ASK www.ma###me7.com
- DNS ASK www.ma###me7.net
- DNS ASK www.ma###me7.co.kr