Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Internet' = '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.q3q.com'
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.q2#.com
- '<SYSTEM32>\regsvr32.exe' browsar.dll /s
- %WINDIR%\Media\dbase.qdb
- %WINDIR%\system\1
- %WINDIR%\Media\qq.txt
- <SYSTEM32>\browsar.dll
- %WINDIR%\Media\Windows »№Ф.wav
- ClassName: '' WindowName: '(null)'