Technical Information
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = 'explorer.exe, %APPDATA%\d96232e0\eudcedit.exe'
- %APPDATA%\d96232e0\eudcedit.exe
- %TEMP%\4o8X3o
- %TEMP%\nsl2.tmp
- 'xm#.###l.minergate.com':45560
- DNS ASK xm#.###l.minergate.com