Техническая информация
- [HKLM\System\CurrentControlSet\Services\QQ] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\QQ] 'ImagePath' = '%WINDIR%\QQ.exe'
- 'QQ' %WINDIR%\QQ.exe
- %WINDIR%\qq.exe
- %WINDIR%\uninstal.bat
- %WINDIR%\qq.exe
- DNS ASK en####a.3322.org
- '%WINDIR%\qq.exe'
- '%WINDIR%\syswow64\cmd.exe' /c %WINDIR%\uninstal.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c %WINDIR%\uninstal.bat