Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wsault.exe' = '%WINDIR%:wsault.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{00CF1FEB-2FE1-815B-562F-822331173C25}] 'StubPath' = '%WINDIR%:wsault.exe'
- %WINDIR%\Explorer.EXE
- %WINDIR%:wsault.exe
- '60.##8.154.197':80
- 'mi#####ft.serveuser.com':443
- DNS ASK mi#####ft.ServeUser.com