Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\qfx86] 'ImagePath' = '%WINDIR%\qfx86.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\qfx86] 'Start' = '00000002'
- %WINDIR%\qfx86.sys
- %HOMEPATH%\Desktop\УОРР.lnk
- %TEMP%\3.tmp
- %TEMP%\1.tmp
- %TEMP%\2.tmp
- %TEMP%\3.tmp
- %TEMP%\2.tmp
- %TEMP%\1.tmp
- 'pz.##0594.com':8090
- 'localhost':1038
- 'qx#####940641.my3w.com':80
- http://qx#####940641.my3w.com/b/user.asp
- http://qx#####940641.my3w.com/
- http://qx#####940641.my3w.com/b/user.asp
- DNS ASK pz.##0594.com
- DNS ASK pz###0594.com
- DNS ASK qx#####940641.my3w.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''