Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'QBand' = '%PROGRAM_FILES%\QBand\QBandUpdate.exe'
- %PROGRAM_FILES%\QBand\Microsoft.VC80.CRT.manifest
- %PROGRAM_FILES%\QBand\QBandUpdate.exe
- %PROGRAM_FILES%\QBand\msvcr80.dll
- %TEMP%\nsw2.tmp\DLLWebCount.dll
- %PROGRAM_FILES%\QBand\uninstall.exe
- %TEMP%\nsw2.tmp\ExistFiles.dll
- %TEMP%\nsw2.tmp\System.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\overlap[1].chk
- %PROGRAM_FILES%\QBand\QBand.dll
- %TEMP%\nsw2.tmp\KillProcDLL.dll
- 'qi##o.co.kr':80
- qi##o.co.kr/counter/count_insert.php?&p##########
- qi##o.co.kr/chk/overlap.chk
- DNS ASK www.qi##o.co.kr
- DNS ASK qi##o.co.kr