Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{7501-1768-0316-9171}' = '%HOMEPATH%\Templates\QJFXQ.exe'
- '%HOMEPATH%\Templates\QJFXQ.exe'
- %HOMEPATH%\Templates\QJFXQ.exe
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK do######1484.mediafire.com
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: '(null)'