Техническая информация
- [<HKLM>\SYSTEM\CONTROLSET003\Services\fqnqlz] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\fqnqlz] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\fqnqlz] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k fqnqlz
- <SYSTEM32>\vjzgiv.com
- <SYSTEM32>\000413ea.sys
- 'ri###.3322.org':80
- ri###.3322.org/2013000628/141111/174453.jsp
- ri###.3322.org/2013000628/141051/154015.jsp
- DNS ASK ri###.3322.org