Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\windsnet] 'Start' = '00000002'
- '<SYSTEM32>\windsnet.exe'
- '<SYSTEM32>\windsnet.exe' /install /silent
- <SYSTEM32>\windsnet.exe
- 'ju#####et2.myftp.org':80
- 'ju####net.ath.cx':80
- ju#####et2.myftp.org/control.php?c=#
- ju####net.ath.cx/control.php?c=#
- DNS ASK ju#####et2.myftp.org
- DNS ASK ju####net.ath.cx
- DNS ASK bi#.hu
- ClassName: 'MS_WINHELP' WindowName: ''