Technical Information
To ensure autorun and distribution:
Creates or modifies the following files:
- %HOMEPATH%\Start Menu\Programs\Startup\setup.js
Modifies file system:
Creates the following files:
- %TEMP%\setup.js
- %TEMP%\is-RDV8J.tmp\Setup.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- %TEMP%\Setup.exe
Deletes the following files:
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
Miscellaneous:
Creates and executes the following:
- '<SYSTEM32>\wscript.exe' "%TEMP%\setup.js"
- '%TEMP%\is-RDV8J.tmp\Setup.tmp' /SL5="$100E0,10816371,140800,%TEMP%\Setup.exe"
- '%TEMP%\Setup.exe'
Executes the following:
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 30 /tn anydesk /tr "%TEMP%\setup.js
