Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'aqw1oPrLQ6qY5r' = '%WINDIR%\aQS32kC3Lgz.exe'
- '%WINDIR%\aQS32kC3Lgz.exe'
- '%HOMEPATH%\Local Settings\Tempserver.exe'
- %WINDIR%\InstallRemove.dat
- %WINDIR%\aQS32kC3Lgz.exe
- %HOMEPATH%\Local Settings\Tempserver.exe
- %HOMEPATH%\Local Settings\Tempserver.exe