Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Services.exe' = '%APPDATA%\Services.exe'
- %WINDIR%\explorer.exe
- %APPDATA%\services.exe
- 'po##.#ashvault.pro':80
- DNS ASK po##.#ashvault.pro
- '%APPDATA%\services.exe'
- '%WINDIR%\explorer.exe' -B --donate-level=1 -a cryptonight --url=pool.hashvault.pro:80 -u 44dR9iqu4vGj299MJ3nQHvGnmnR3SiggCUdtS3q2niBDN7dCB9jh9BEEyv9NCKMCo6dQ2pdVNcAy5Qz7Z1iSWM4tT9tP887 -p -R --variant=-1 -t 1 --max-...