Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\msupdate] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\msupdate] 'ImagePath' = '%APPDATA%\BE4\svchost.exe'
- %APPDATA%\BE4\svchost.exe
- <Full path to file>
- '14#.0.77.92':80
- http://14#.0.77.92/stat.php