Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'OneDrive' = '<Полный путь к файлу>'
- <SYSTEM32>\calc.exe
- %TEMP%\LZMA.DLL
- %TEMP%\iikjrob
- %TEMP%\aut1.tmp
- %TEMP%\iikjrob
- %TEMP%\aut1.tmp
- 'po##.#upportxmr.com':3333
- DNS ASK po##.#upportxmr.com
- '<SYSTEM32>\calc.exe' -o pool.supportxmr.com:3333 -u 48bEXicwesk8Eibo3y8KM26z4rQLUQ4RETaiQvZukRzQJY5vDdunFZz6YsmECpvo71C6ehxaxQj2RMopWsi6JumVBeE5Meq -p 111111{CPU_INACTIVE}111111 -k --donate-level=1 --max-cpu-usage=...
- '<SYSTEM32>\calc.exe' -o pool.supportxmr.com:3333 -u 48bEXicwesk8Eibo3y8KM26z4rQLUQ4RETaiQvZukRzQJY5vDdunFZz6YsmECpvo71C6ehxaxQj2RMopWsi6JumVBeE5Meq -p 111111{CPU_ACTIVE}111111 -k --donate-level=1 --max-cpu-usage=50...