Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'scaman' = '%HOMEPATH%\Tip8\Rfbski5.vbs'
- rfbski5.exe
- %HOMEPATH%\tip8\rfbski5.exe
- %HOMEPATH%\tip8\rfbski5.vbs
- 'sh###.dmca.gripe':443
- DNS ASK sh###.dmca.gripe
- '%HOMEPATH%\tip8\rfbski5.exe'