Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svc' = '%WINDIR%\mmqcmg.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svc' = '<Полный путь к вирусу>'
- [<HKLM>\SYSTEM\ControlSet001\Services\dfgdssdadasdas3yhqethwerewrrdf;';l'jkk;k;] 'Start' = '00000002'
- '%WINDIR%\mmqcmg.exe'
- %WINDIR%\mmqcmg.exe
- 'ee#####eee.f3322.org':2013
- DNS ASK ee#####eee.f3322.org