Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\cqc3ck6m1l.exe
- <SYSTEM32>\attrib.exe "%HOMEPATH%\Start Menu\Programs\Startup\cqc3ck6m1l.exe" +s +h
- <SYSTEM32>\lexp1orer.exe
- <SYSTEM32>\Xpspeed.exe
- %HOMEPATH%\Start Menu\Programs\Startup\cqc3ck6m1l.exe
- 'www.qi##qq.com':80
- www.qi##qq.com/sx/ffsx.txt
- DNS ASK www.qi##qq.com