Technical Information
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = 'userinit.exe,<Full path to file>,'
- %WINDIR%\syswow64\service\simupdconf.dll
- %WINDIR%\syswow64\service\simupdconf.dll
- %WINDIR%\syswow64\service\simupdconf.dll
- '21#.#2.207.100':80