Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GENLSNINGERNE' = 'wscript "%HOMEPATH%\Unmollifiably\Tutorship.vbs"'
- %WINDIR%\win.ini
- tutorship.exe
- %HOMEPATH%\unmollifiably\tutorship.exe
- %HOMEPATH%\unmollifiably\tutorship.vbs
- DNS ASK mr#7.pw
- '%HOMEPATH%\unmollifiably\tutorship.exe'