Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{40f550c2-a844-49e6-ba74-ded0ab840d5b}] 'StubPath' = '"<Полный путь к вирусу>" -ActiveSetup'
- 'we####lution.net':80
- http://we####lution.net/external/update
- DNS ASK we####lution.net