Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Gecksho5' = '%HOMEPATH%\Regrowt\SPIRTC.vbs'
- spirtc.exe
- %HOMEPATH%\regrowt\spirtc.exe
- %HOMEPATH%\regrowt\spirtc.vbs
- DNS ASK vd####9wogzzu.info
- '%HOMEPATH%\regrowt\spirtc.exe'