2010/01/21

IQETREWQ.EXE memo

iqetrewq.exe + autorun.inf

XVASSDF.EXE の亜種

Local Settings\temp\ *dll *.exe

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Folder\Hidden\SHOWALL\"CheckedValue"

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"Hidden"

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\"ShowSuperHidden"

http://www.prevx.com/filenames/X3116953250184068340-X1/IQETREWQ.EXE.html