Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\fghi Klmnopqr Tuv] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\Application Data\Microsoft\Ickie\ggsqmi.exe' NewRunApp
- '%ALLUSERSPROFILE%\Application Data\Microsoft\Ickie\ggsqmi.exe'
- '<SYSTEM32>\ping.exe' -n 5 127.0.0.1
- %ALLUSERSPROFILE%\Application Data\Microsoft\Ickie\ggsqmi.exe
- 'st##.#mshusheng.com':23210
- DNS ASK st##.#mshusheng.com