Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\test] 'ImagePath' = '%TEMP%\test.sys'
- %TEMP%\test.sys
- 'www.qi###ingwg.com':80
- http://www.qi###ingwg.com/a/yeyou/A_B_C_D/anheishijie/626.html
- DNS ASK www.qi###ingwg.com
- ClassName: 'Shell_TrayWnd' WindowName: ''