Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<Unknown>' = '<Full path to file>'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = 'explorer.exe,"<Full path to file>"'
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '<File name>.exe' = '<Full path to file>'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe
- http://13#.#25.27.253/base/A4BCA15D20C913A64B35DFAA9E32081F.html
- http://13#.#25.27.253/base/2992AF966C2FD87D1F9F45575CC9F62E.html
- http://13#.#25.27.253/base/922E0D1B6A7EC412FEA72EDDC0120DB9.html
- http://13#.#25.27.253/base/EF377727777104FE6AF8DB33C62FDD17.html