Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\fastuserswitchingcompatibility\Parameters] 'ServiceDll' = '<SYSTEM32>\qvxnq.dll'
- 'fastuserswitchingcompatibility' <SYSTEM32>\svchost.exe -k netsvcs
- %TEMP%\979982.log
- %TEMP%\979982.log в %WINDIR%\syswow64\qvxnq.dll
- DNS ASK wq###5.3322.org