Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '000000000001' = '%WINDIR%\12.exe'
- '%WINDIR%\12.exe'
- '%WINDIR%\iLabel2.EXE'
- %WINDIR%\12.exe
- %WINDIR%\iLabel2.EXE
- 'us###.qzone.qq.com':80
- http://us###.qzone.qq.com/fcg-bin/cgi_get_portrait.fcg?ui#############
- DNS ASK www.la##l.kr
- DNS ASK wp#d
- DNS ASK us###.qzone.qq.com
- ClassName: 'Shell_TrayWnd' WindowName: ''