Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\EventSystemRoot] 'Start' = '00000002'
- '%WINDIR%\QQmop.exe'
- '<SYSTEM32>\svchost.exe' -k imgsvc
- C:\WinTemp.ini
- %PROGRAM_FILES%\Google\Google v8.html
- %WINDIR%\QQmop.exe
- %WINDIR%\ShortCutTool.dll
- %PROGRAM_FILES%\Google\Google v8.html
- C:\WinTemp.ini
- 'fm####.linkpc.net':3313
- 'fm###2.gicp.net':3311
- DNS ASK fm####.linkpc.net
- DNS ASK fm###2.gicp.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'