Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Quick Seeker' = '<LS_APPDATA>\Quickseeker\quickseeker.exe'
- '<LS_APPDATA>\Quickseeker\quickseeker.exe' signup http://www.qu####seeker.com/api/signup http://www.qu####seeker.com/api/signoff
- '%TEMP%\nsx2.tmp\Quickseeker_Installer.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- <LS_APPDATA>\Quickseeker\msvcr120.dll
- <LS_APPDATA>\Quickseeker\msvcp120.dll
- <LS_APPDATA>\Quickseeker\Uninstall.exe
- <LS_APPDATA>\Quickseeker\vccorlib120.dll
- <LS_APPDATA>\Quickseeker\cpprest120_xp_2_2.dll
- %TEMP%\nsx2.tmp\DcryptDll.dll
- %TEMP%\nsx2.tmp\Quickseeker_Installer.dat
- <LS_APPDATA>\Quickseeker\quickseeker.exe
- %TEMP%\nsx2.tmp\Quickseeker_Installer.exe
- %TEMP%\nsx2.tmp\Quickseeker_Installer.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\nsx2.tmp\DcryptDll.dll
- %TEMP%\nsx2.tmp\Quickseeker_Installer.dat
- ClassName: 'Indicator' WindowName: ''