Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\windsnet] 'ImagePath' = '<SYSTEM32>\windsnet.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\windsnet] 'Start' = '00000002'
- '<SYSTEM32>\windsnet.exe'
- '<SYSTEM32>\windsnet.exe' /install /silent
- <SYSTEM32>\windsnet.exe
- 'ju#####et.homeftp.org':80
- 'ju####net.ath.cx':80
- http:///proto/control.php?c=# via ju#####et.homeftp.org
- http:///proto/control.php?c=######## via ju####net.ath.cx
- http:///proto/control.php?c=# via ju####net.ath.cx
- DNS ASK ju#####et.homeftp.org
- DNS ASK ju####net.ath.cx
- DNS ASK bi#.hu
- ClassName: 'MS_WINHELP' WindowName: ''