Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\startpa.bat
- %ProgramFiles%\experience\howobuyo.exe
- %ProgramFiles%\experience\copy.bat
- %ProgramFiles%\experience\sonis.vbs
- %ProgramFiles%\experience\startpa.bat
- %ProgramFiles%\experience\sonis.bat
- ClassName: 'EDIT' WindowName: ''
- '<SYSTEM32>\wscript.exe' "%ProgramFiles%\Experience\sonis.vbs"
- '%ProgramFiles%\experience\howobuyo.exe' --algo ETHASH --pool eth-eu1.nanopool.org:9999 --user 0x32076c6c1bdca78233f1a31d7cff9a53d6a65c45.SHIP2K28724 --watchdog exit
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\sonis.bat" "' (со скрытым окном)
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\copy.bat" "
- '<SYSTEM32>\xcopy.exe' startpa.bat "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\". /Y
- '<SYSTEM32>\cmd.exe' /c ""%ProgramFiles%\Experience\sonis.bat" "