Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ybair' = '<SYSTEM32>\qvqmhq\ybair.exe'
- <SYSTEM32>\qvqmhq\ybair.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = ''
- <SYSTEM32>\qvqmhq\2.tmp