Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wuauct' = '"%APPDATA%\wuauct.exe"'
- %APPDATA%\wuauct.exe
- %APPDATA%\bloc20.ini
- 'te######zy.100webspace.net':80
- te######zy.100webspace.net/creu.php
- DNS ASK te######zy.100webspace.net