Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\windowsupdateelevatedinstaller.url
- %WINDIR%\microsoft.net\framework\v2.0.50727\msbuild.exe
- %HOMEPATH%\btagservice\sdchange.exe
- %HOMEPATH%\btagservice\windowsupdateelevatedinstaller.vbs
- %APPDATA%\36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee\run.dat
- 'ub#####ogs.duckdns.org':1666
- DNS ASK ub#####ogs.duckdns.org
- '%WINDIR%\microsoft.net\framework\v2.0.50727\msbuild.exe'