Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'xµ†a_a$w¬nUvi®[[ 3' = '8‹¯ª~(„'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '?»ˆ ŒESmA:2”2 {P«$'0K' = '8‹¯ª~(„'
- <SYSTEM32>\cmd.exe /c """%TEMP%\FTE58KA4y5oKu.bat"" "
- %TEMP%\FTE58KA4y5oKu.bat