Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IMJPMIG' = '"<Полный путь к вирусу>"'
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft 0ffice Quick Start.lnk
- %HOMEPATH%\User
- %HOMEPATH%\UserProfile.dll
- %HOMEPATH%\User.ini
- %HOMEPATH%\User16.dll
- %HOMEPATH%\User
- %HOMEPATH%\User16.dll
- %HOMEPATH%\User.ini
- 'ch####hu.vicp.net':443
- DNS ASK ch####hu.vicp.net