Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\wuauserv] 'Start' = '00000002'
- '<SYSTEM32>\reg.exe' query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}
- '<SYSTEM32>\findstr.exe' "}\\{"
- '<SYSTEM32>\reg.exe' add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{22475450-5E7A-4A9A-8E13-23DC57A7A7A5}\Connection /v IpCheckingEnabled /t REG_DWORD /d 0 /...
- '<SYSTEM32>\cmd.exe' /c reg query HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318} | findstr "}\\{"
- '<SYSTEM32>\cmd.exe' /c %TEMP%\bt7520.bat <Full path to file>
- '<SYSTEM32>\sc.exe' config srservice start= DISABLED
- '<SYSTEM32>\sc.exe' config wuauserv start= AUTO
- %TEMP%\bt7520.bat
- %TEMP%\bt7520.bat