Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_Dlls' = 'fmsiocps.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\tqat.exe] 'Debugger' = 'ntsd -d'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'fmsiocps' = '%WINDIR%\fmsiocps.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\fmsiocps.dll
- %WINDIR%\fmsiocps.exe