Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SHELL' = '%WINDIR%\System\jushedd.exe'
- %WINDIR%\Co
- %WINDIR%\system\jushedd.exe
- '<IP-адрес в локальной сети>':80
- 'fa####.agropecuaria.ws':80
- 'www.si##v.co.uk':80
- fa####.agropecuaria.ws/appinfo/webstd/novo/procopspro.php
- www.si##v.co.uk/nws.php
- DNS ASK fa####.agropecuaria.ws
- DNS ASK www.si##v.co.uk