Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SUNHELP' = '<SYSTEM32>\sonexplor2.exe'
- 'www.we###me594.com':80
- 'www.12##ha.com':80
- http://www.we###me594.com/music68/other/h1.htm
- http://www.12##ha.com/
- http://www.we###me594.com/music68/tm/adminInfo.asp
- DNS ASK www.we###me594.com
- DNS ASK www.12##ha.com