Trojan.BtcMine.3360

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '敮啪汍桙䝷' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵瑜票祎奂攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '祢杴䉉楤剌' = '㩣坜湩潤獷卜獹整㍭尲獰剆扇⹑硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '奪啵佅摴奉' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵䕜坧呖佚攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '慣橏䝸捅獃' = '㩣坜湩潤獷卜獹整㍭尲䥃䝍卯⹂硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '穂塚䍬楷瑇' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵硜买兦啨攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '瑓䭔瑢奎湭' = '㩣坜湩潤獷卜獹整㍭尲瑃捡充⹧硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '䕖捤䩶捬䕍' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵䱜睌䭁瑏攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '桁湐填摙捴' = '㩣坜湩潤獷卜獹整㍭尲灣敓䙚⹶硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '瑅捧摆扭䉹' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵奜歙䙏䵺攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '婋䝭敶䵥塗' = '㩣坜湩潤獷卜獹整㍭尲䡓硳剂⹃硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '瑧祐䉂捺穆' = '㩣坜湩潤獷卜獹整㍭尲摘䱎䍳⹨硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '潭湑扱桯瑤' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵睜橒坸䥴攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '䩪剱䝏䕫偊' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵潜䉧潴呗攮數'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '晫䥏睈剈汷' = '㩣坜湩潤獷卜獹整㍭尲䍳癍器⹍硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '䭈兇奲兩䱱' = '㩣坜湩潤獷卜獹整㍭尲䵦畗煤⹴硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '牆䝃䵎硙煄' = '㩣坜湩潤獷卜獹整㍭尲硱晵女⹮硥e'
[<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '䑂塕䅄剒摐' = '㩃停潲牧浡慄慴䵜捩潲潳瑦坜湩潤獷卜慴瑲䴠湥屵牐杯慲獭卜慴瑲灵作䕒湕潑攮數'