Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windo?Io1#uN«??j+k?U' = 'Ð<õæ<"£ÀXóÄ_'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'We n¬I›?WcGaOy' = 'Ð<õæ<"£ÀXóÄ_'
- <SYSTEM32>\cmd.exe /c """%TEMP%\OY7xiYzoBvk.bat"" "
- %TEMP%\OY7xiYzoBvk.bat
- ClassName: 'Indicator' WindowName: ''