All right, guys:
1. I have downloaded the .zip file - there is no .exe file inside
2. Source compiles and wallet runs normally (no hidden processes, no additional TCP/UDP connections or servers)
3. There aren't any nodes!
trying connection 54.76.49.245:4156 lastseen=89.3hrs
connect() failed after select(): Connection refused
Process Xh14EkkrTH.exe gets injected in explorer.exe.
You need to learn what hidden processes are.