Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WindowsMediaUpdates' = '%WINDIR%\wmupdate_x86.exe'
- %WINDIR%\wmupdate_x86.exe
- 'ftp://te##.net':21
- DNS ASK ftp://te##.net
- ClassName: 'ConsoleWindowClass' WindowName: '(null)'