- Trojan.BAT.Miner.aj -> \upd.exe
- Trojan.BAT.Miner.aj -> \mnr.exe ( DrWEB: archive: Tool.BtcMine.64, BitDefender: Dropped:Trojan.Generic.KDV.772075 )
- Trojan-Spy.Win32.Carberp.qye -> c:\users\admin\appdata\roaming\microsoft\windows\s tart menu\programs\startup\xll30wilud8.exe ( BitDefender: Gen:Variant.Graftor.49140 )