Техническая информация
- [<HKLM>\SYSTEM\CONTROLSET003\Services\qwddcd] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\qwddcd] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\qwddcd] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k qwddcd
- <SYSTEM32>\jbaqlc.dll
- <SYSTEM32>\00056e3c.sys
- 'jo##.com.cn':8181
- DNS ASK jo##.com.cn