Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\qwAkXSB] 'Start' = '00000002'
- <SYSTEM32>\appmgmts.dll
- <SYSTEM32>\qwAkXSB.sys
- %WINDIR%\Temp\051F2596.tmp
- %WINDIR%\Temp\04A80181.tmp
- %TEMP%\5FDA3C88.log
- C:\Documents and Settings\Infortmp.txt
- <SYSTEM32>\5FDA05B4.tmp
- %WINDIR%\Temp\04A80181.tmp
- %TEMP%\5FDA3C88.log
- %WINDIR%\Temp\051F2596.tmp
- C:\Documents and Settings\Infortmp.txt
- <SYSTEM32>\5FDA05B4.tmp
- '25#.#55.255.255':799
- 'www.ik##520.com':781
- DNS ASK ts.##ss520.com
- DNS ASK www.ba##u.com
- DNS ASK www.ik##520.com