Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'plusbag' = '%PROGRAM_FILES%\plusbag\plusbag.exe'
- %PROGRAM_FILES%\plusbag\nallist.nau
- %PROGRAM_FILES%\plusbag\naelist2.nau
- %PROGRAM_FILES%\plusbag\naelist.nau
- %PROGRAM_FILES%\plusbag\nanolist.nau
- %PROGRAM_FILES%\plusbag\naulist.nau
- %PROGRAM_FILES%\plusbag\naulist2.nau
- 'fi##.#lusbag.net':80
- fi##.#lusbag.net/shoplist/list2.php
- fi##.#lusbag.net/shoplist/list.php
- fi##.#lusbag.net/shoplist/list_loss.php
- fi##.#lusbag.net/shoplist/list_exc.php
- fi##.#lusbag.net/shoplist/list_exc2.php
- fi##.#lusbag.net/shoplist/no_list.php
- fi##.#lusbag.net/cont/regid.txt
- fi##.#lusbag.net/cont/proid.txt
- fi##.#lusbag.net/cont/guid.txt
- fi##.#lusbag.net/cont/dllid.txt
- fi##.#lusbag.net/cont/sizeid.txt
- DNS ASK fi##.#lusbag.net
- ClassName: 'IEFrame' WindowName: ''