Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\QTCreator] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k QTCreator
- <SYSTEM32>\cmd.exe /c c:\va.bat
- C:\va.bat
- <SYSTEM32>\QTCreator32.xtl
- C:\va.bat
- 'po####000.gicp.net':8085
- DNS ASK po####000.gicp.net