Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\msdfma.txt
- '%WINDIR%\junction.exe' "%WINDIR%\junction" "%ALLUSERSPROFILE%\Start Menu\Programs\Startup"
- %WINDIR%\junction.exe
- %WINDIR%\svchost.exe
- 'www.ip##.com':80
- '<IP-адрес в локальной сети>':2021
- 'www.ip###.com.cn':80
- http:///ip.php?ip######################## via www.ip##.com
- http:///ipadd.asp?Se##################### via www.ip###.com.cn
- DNS ASK www.ip##.com
- DNS ASK www.ip###.com.cn