Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\visual pack] 'ImagePath' = '<Полный путь к вирусу>'
- [<HKLM>\SYSTEM\ControlSet001\Services\visual pack] 'Start' = '00000002'
- 'vi###lpack.kr':80
- http://vi###lpack.kr/log/install.php?ma############################
- DNS ASK vi###lpack.kr