Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\TTXSEG.lnk
- '<SYSTEM32>\schtasks.exe' /create /tn "SZKZQP" /tr %TEMP%\Skype\HYYLIB.exe /sc minute /mo 1
- '<SYSTEM32>\cmd.exe' /c schtasks /create /tn "SZKZQP" /tr %TEMP%\Skype\HYYLIB.exe /sc minute /mo 1
- %TEMP%\rdnjqjz
- %TEMP%\aut1.tmp
- %TEMP%\rdnjqjz
- %TEMP%\aut1.tmp
- 'ed####s349.ddns.net':1337
- DNS ASK ed####s349.ddns.net