Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'eCwYM' = '%APPDATA%\eCwYM\eCwYM.exe'
- installutil.exe
- %TEMP%\installutil.exe
- %APPDATA%\ecwym\ecwym.exe
- 'google.com':443
- 'bing.com':443
- 'google.com':443
- 'bing.com':443
- DNS ASK google.com
- DNS ASK bing.com
- '%TEMP%\installutil.exe'