Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'netstat' = '%CommonProgramFiles%\system32\netstat.exe'
- %CommonProgramFiles%\safemode
- 'ha#####a.jujuy.gov.ar':80
- '92.##.75.191':80
- ha#####a.jujuy.gov.ar/cemergencias/paginaweb/fotos/todos3.jpg
- 92.##.75.191/secret.php
- DNS ASK ha#####a.jujuy.gov.ar