Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'LoftWare' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jusched' = '"<LS_APPDATA>\l00t1\jusched.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'TaskManager' = ''
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SkypeMS' = ''
- firefox.exe
- <LS_APPDATA>\l00t1\jusched.exe
- DNS ASK www.jj###rts.com.tw
- ClassName: 'Indicator' WindowName: '(null)'