Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\winsys.exe
- '<SYSTEM32>\xcopy.exe' "<Full path to file>" "%HOMEPATH%\Start Menu\Programs\Startup\winsys.exe*"
- '<SYSTEM32>\ping.exe' localhost
- '<SYSTEM32>\cmd.exe' /c xcopy "<Full path to file>" "%HOMEPATH%\Start Menu\Programs\Startup\winsys.exe*"
- '<SYSTEM32>\cmd.exe' /c ping localhost && del /f /q "<Full path to file>"
- <Full path to file>
- ClassName: 'MS_WINHELP' WindowName: ''