Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Services' = '%UserProfile%\dma.exe'
- '<SYSTEM32>\cmd.exe' /c C:\EQQSG.bat
- '<SYSTEM32>\cmd.exe' /c C:\QJINR.bat
- C:\EQQSG.bat
- C:\QJINR.bat
- C:\EQQSG.bat
- C:\QJINR.bat