Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '%WINDIR%\2\jxxxih.exe'
- '%WINDIR%\2\jxxxih.exe'
- %WINDIR%\2\jxxxih.exe
- %WINDIR%\2\NetUtil.dll
- %WINDIR%\2\000.txt
- 'localhost':2012
- 'wu#####u1116.gicp.net':2013
- DNS ASK wu#####u1116.gicp.net