Trojan.Dysflink?????QQ?????????????????????(STARTMENU, COMMON_STARTMENU, DESKTOP, COMMON_DESKTOPDIRECTORY, PROGRAM_FILES, PERSONAL)?????.lnk??????????????????????.lnk???
.lnk???????????
??????????????????????????????????????????????????????????????
??????????????????
ROOT:Program Filesqcat
ROOT:Program Filesqcatqcat.ini
ROOT:Program Filesqcatqsetup.exe
ROOT:Program Filesqcattmpdata
ROOT:Program Filesqcattmpdata*.lnk
????????qcat.ini?????????.lnk??????tmpdata?????????????.lnk?????????
?????QQ??????????QQ?????????http://7[REMOVED]m.com:81/dd/dd/qq.asp?
????????????Trojan.Dysflink???????????????????????
Thanks to Jerry Jing for the technical analysis.