Troj/QQRob-AAQ is a Trojan for the Windows platform.
Troj/QQRob-AAQ includes functionality to download, install and run new software.
When first run Troj/QQRob-AAQ copies itself to <Windows>\wuauclt.exe.
The following registry entry is created to run wuauclt.exe on startup:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
Microsoft
<Windows>\wuauclt.exe
Registry entries are set as follows:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
hx-1
1
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
NoDriveTypeAutoRun
bd