Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'privsoft' = '%ProgramFiles%\privsoft\privsoft.exe'
- '%ProgramFiles%\privsoft\privsoft.exe' -delete "<Full path to file>"
- %ProgramFiles%\privsoft\client_id
- %ProgramFiles%\privsoft\privsoft.exe