Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'yvciwesvljugfweqiesf' = 'C:\Users\Public\yvciwesvljugfweqiesf.vbs'
- C:\appdata\printfilterpipelinesvc\appvsentinel.bat
- C:\users\public\yvciwesvljugfweqiesf.vbs
- DNS ASK ha###a.ddns.net