Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\qq] 'Start' = '00000002'
- '%TEMP%\Temp\¶МРЕєдХЁ.exe'
- '%TEMP%\Temp\qq.exe'
- '%PROGRAM_FILES%\qq.EXE'
- '<SYSTEM32>\userinit.exe'
- <SYSTEM32>\userinit.exe
- %TEMP%\Temp\¶МРЕєдХЁ.exe
- %TEMP%\Temp\qq.exe
- %PROGRAM_FILES%\qq.EXE
- %TEMP%\Temp\SkinH_EL.dll
- %PROGRAM_FILES%\qq.EXE
- %TEMP%\Temp\SkinH_EL.dll
- 'qh####3.8866.org':8080
- DNS ASK qh####3.8866.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'