Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{FE9FE3F8-5273-0681-3127-1342EC260E1C}] 'StubPath' = '%WINDIR%\mskitchell.exe'
- %WINDIR%\mskitchell.exe
- 'mu####.exprenum.com':80
- 'mu####.exprenum.com':443
- DNS ASK mu####.exprenum.com