Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Auto Service' = '%WINDIR%\system\wuauclta.exe'
- %WINDIR%\system\hsaced0c.jpg
- %WINDIR%\system\hsaced0c.jpg в %WINDIR%\system\CRNJEUFU060415195501.jpg
- 'www.re###s.com.br':80
- http://www.re###s.com.br/images/on/02/l1.php
- DNS ASK www.re###s.com.br