Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Qycx Network Agent] 'Start' = '00000002'
- <SYSTEM32>\qwmSvr.EXE
- <SYSTEM32>\winlogon.exe
- <SYSTEM32>\qwmRdHelp.dll
- <SYSTEM32>\qwmHelp3.dll
- <SYSTEM32>\qwmRd.dll
- <SYSTEM32>\qwmSvr.EXE
- %TEMP%\wrd1.tmp
- <SYSTEM32>\winmn3.dll
- <SYSTEM32>\qwmHelp.dll
- '20#.#06.185.238':80
- '21#.#9.196.218':80
- '22#.#94.211.204':8766
- '20#.#08.119.194':80
- 21#.#9.196.218/
- 20#.#06.185.238/
- 20#.#08.119.194/