Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'System3264' = '<LS_APPDATA>\System3264\taskman.exe'
- '<SYSTEM32>\svchost.exe' -a cryptonight -o stratum+tcp://xmr.crypto-pool.fr:3333 -u 42MASbTavGV5UThDmGo2tf9fzFt9nGJreXHhNKusxVU97RCDLDu1EWza4hWSJWcrECXmD6sGRD2L9NXkMShbyzxCTej9FoT -p x -t 1
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- <LS_APPDATA>\System3264\taskman.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''