Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%TEMP%\Sysqemrpgol.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%TEMP%\Sysqemzxtth.exe'
- '%TEMP%\Sysqemzxtth.exe'
- %TEMP%\Sysqemzxtth.exe
- %TEMP%\Sysqemrpgol.exe
- %TEMP%\qpath.ini
- %TEMP%\Sysqamqqvaqqd.exe
- %TEMP%\Sysqemrpgol.exe
- %TEMP%\Sysqamqqvaqqd.exe
- %TEMP%\Sysqemzxtth.exe