Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'cmdd' = '%CommonProgramFiles%\system32\cmdd.exe'
- %CommonProgramFiles%\safemode
- 'www.ju####ende.gov.ar':80
- '10#.#5.170.246':80
- www.ju####ende.gov.ar/images/2009/02/11.jpg
- 10#.#5.170.246/clientes.php
- DNS ASK www.ju####ende.gov.ar