Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'jusched' = '<SYSTEM32>\jusched.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C23F0630-03F4-DE7B-5D1C-1A185B1A035D}] 'StubPath' = '<SYSTEM32>\jusched.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\jusched.exe
- 'si###.zapto.org':3460
- DNS ASK si###.zapto.org
- '<IP-адрес в локальной сети>':1033