Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Jklmno Qrstuvwx Abc] 'Start' = '00000002'
- '<SYSTEM32>\iigkie.exe'
- <SYSTEM32>\iigkie.exe
- 'to####.#st-a-la-maison.com':81
- 'yj#.###an-engineer.com':6595
- DNS ASK to####.#st-a-la-maison.com
- DNS ASK yj#.###an-engineer.com