Техническая информация
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] 'QQMin' = '"%ProgramFiles%\QQMin.exe"'
- ClassName: 'OLLYDBG', WindowName: ''
- ClassName: 'GBDYLLO', WindowName: ''
- ClassName: 'pediy06', WindowName: ''
- %ProgramFiles%\qqmin.exe
- %ProgramFiles%\qqmin.exe
- 'ia####i.gicp.net':8010
- DNS ASK ia####i.gicp.net
- ClassName: 'TAppBuilder' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- '%ProgramFiles%\qqmin.exe'
- '%ProgramFiles%\qqmin.exe' ' (со скрытым окном)