Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\KAS_Services] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\KAS_Server.dat
- <SYSTEM32>\KAS_Server.dll
- <SYSTEM32>\KAS_Server.exe
- 'ww##.##ee.010-idc.com':80
- ww##.##ee.010-idc.com/ip.txt
- DNS ASK ww##.##ee.010-idc.com