Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\QQemomeo\tmp.tmp' = '%TEMP%\QQemomeo\tmp.tmp:*:Enabled:tmp.tmp'
- %TEMP%\QQemomeo\tmp.tmp /NCRC
- %TEMP%\nsn5.tmp\System.dll
- %TEMP%\nsn5.tmp\NSISdl.dll
- %TEMP%\setuprun.exe
- %TEMP%\nsq2.tmp
- %TEMP%\QQemomeo\tmp.tmp
- %TEMP%\nsx4.tmp
- 'fi###.qqhelper.com':80
- fi###.qqhelper.com/bindsoft/bindsetup.exe
- DNS ASK fi###.qqhelper.com