Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'QBand' = '%PROGRAM_FILES%\QBand\QBandUpdate.exe'
- '%APPDATA%\qband\QBands_ISHOW01.exe'
- '<SYSTEM32>\cmd.exe' /c \DelUS.bat
- %PROGRAM_FILES%\QBand\Microsoft.VC80.CRT.manifest
- %PROGRAM_FILES%\QBand\QBandUpdate.exe
- %PROGRAM_FILES%\QBand\QBand.dll
- %TEMP%\nsy4.tmp\DLLWebCount.dll
- %PROGRAM_FILES%\QBand\uninstall.exe
- %PROGRAM_FILES%\QBand\msvcr80.dll
- %TEMP%\nsy4.tmp\KillProcDLL.dll
- C:\DelUS.bat
- %TEMP%\nsg2.tmp\SelfDelete.dll
- %APPDATA%\qband\QBands_ISHOW01.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\overlap[1].chk
- %TEMP%\nsy4.tmp\ExistFiles.dll
- %TEMP%\nsy4.tmp\System.dll
- %TEMP%\nsg2.tmp\SelfDelete.dll
- 'qi##o.co.kr':80
- qi##o.co.kr/counter/count_insert.php?&p#################
- qi##o.co.kr/chk/overlap.chk
- DNS ASK www.qi##o.co.kr
- DNS ASK qi##o.co.kr