Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Schedule] 'Start' = '00000002'
- DNS server to '<DNS_SERVER>'
- DNS server to '114.114.114.114'
- <Full path to file>
- 'up.##kings.pw':8888
- DNS ASK up.##kings.pw
- '<SYSTEM32>\ping.exe' 127.0.0.1 -n 6
- '<SYSTEM32>\sc.exe' start xWinWpdSrv
- '<SYSTEM32>\cmd.exe' /c sc start xWinWpdSrv&ping 127.0.0.1 -n 6 && del <Full path to file> >> NUL