Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Services.exe' = '%APPDATA%\Services.exe'
- %WINDIR%\explorer.exe
- %APPDATA%\services.exe
- DNS ASK po##.#ashvault.pro
- '%APPDATA%\services.exe'
- '%WINDIR%\explorer.exe' -B --donate-level=1 -a cryptonight --url=pool.hashvault.pro:3333 -u 41dhzEvRpLefgGMamVZB4BJrssK53zXwWWH1DwTddanHhUSqjHrCqDecBB2vgLKGEVCorwyTEN1TtbKAcdqcuoZZQVcWz19 -p x -R --variant=-1 -t 1 --m...