Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wuauct' = '"%APPDATA%\wuauct.exe"'
- %APPDATA%\wuauct.exe
- %APPDATA%\bloc20tt.ini
- 'www.di#####.inovalink.net':80
- http://www.di#####.inovalink.net/wab/index2.php
- DNS ASK www.di#####.inovalink.net