Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Net 4.1.2 Ran Windows Mic' = '<Полный путь к файлу>'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows XmrMing] 'ImagePath' = 'C:\ProgramData\Microsoft\wininit.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows XmrMing] 'Start' = '00000002'
- DNS ASK xm#.#2pool.com