Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'loveqq' = '%WINDIR%\temp\2012127132958.exe'
- %WINDIR%\Temp\2012127132958.exe
- %WINDIR%\Temp\2012127132956.exe
- <SYSTEM32>\SkinH_EL.dll
- %TEMP%\office2007.she
- %WINDIR%\Temp\2012127132956.exe
- %WINDIR%\Temp\2012127132958.exe
- 'q-##.3322.org':80
- DNS ASK q-##.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: ''