Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ArU:q˜jiI’&PoU9?a' = '\ÕäË;ØsP5>'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ViIa?C#E?/?C3E?jOgi\?U' = '\ÕäË;ØsP5>'
- <SYSTEM32>\cmd.exe /c """%TEMP%\DrmiDJ6lBMRa.bat"" "
- %TEMP%\DrmiDJ6lBMRa.bat
- ClassName: 'Indicator' WindowName: ''