Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\SharedTaskScheduler] '{1b40a131-cdb4-457b-8f50-bb8e92e645ec}' = 'flanagan'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\nqycp.dll,windows
- <SYSTEM32>\nqycp.dll
- DNS ASK www.am###bore.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'