Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicrodoftUpdate' = '%WINDIR%\Mine\update.bat'
- '%WINDIR%\Mine\chp.exe' add.bat
- '%WINDIR%\Mine\chp.exe' minerd.exe -o stratum+tcp://pool.d2.cc:3335 -a scrypt -O worldcoinmaster.1:1
- '%WINDIR%\Mine\minerd.exe' -o stratum+tcp://pool.d2.cc:3335 -a scrypt -O worldcoinmaster.1:1
- '<SYSTEM32>\cmd.exe' /c add.bat
- '<SYSTEM32>\reg.exe' add "hklm\software\microsoft\windows\currentversion\run" /v "MicrodoftUpdate" /t reg_sz /d %WINDIR%\Mine\update.bat /f
- %WINDIR%\Mine\zlib1.dll
- %WINDIR%\Mine\update.bat
- %WINDIR%\Mine\chp.exe
- %WINDIR%\Mine\add.bat
- %WINDIR%\Mine\libcurl-4.dll
- %TEMP%\~DF564E.tmp
- %WINDIR%\Mine\pthreadGC2.dll
- %WINDIR%\Mine\minerd.exe
- 'po##.d2.cc':3335
- DNS ASK po##.d2.cc
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''