Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Jklmno Qrstuvwx Abc] 'ImagePath' = '%WINDIR%\dqrhqi.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Jklmno Qrstuvwx Abc] 'Start' = '00000002'
- '%WINDIR%\dqrhqi.exe'
- %WINDIR%\dqrhqi.exe
- 'l5##.3322.org':2014
- DNS ASK l5##.3322.org