Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'run' = '%APPDATA%\Microsoft\msconfig.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- %APPDATA%\Microsoft\msconfig.exe
- '<SYSTEM32>\attrib.exe' +H %APPDATA%\Microsoft\msconfig.exe
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe' -a sha256 -o stratum+tcp://connect.pool.bitcoin.com:3333 -u PBCraft9700 -p Santana69 -g yes -I 0 -T 83