Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\scutlqtpw] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\scutlqtpw] 'ImagePath' = '%WINDIR%\scutlqtpw.exe'
- %WINDIR%\scutlqtpw.exe
- %WINDIR%\wittlqksw.exe
- 'mo###parsa.com':80
- http://mo###parsa.com/plugins/content/apismtp/setconf.php
- DNS ASK mo###parsa.com
- '%WINDIR%\scutlqtpw.exe'