Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ServiceUpdate.exe' = '"%APPDATA%\ServiceUpdate.exe" ..'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ServiceUpdate.exe' = '"%APPDATA%\ServiceUpdate.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\ServiceUpdate.exe
- %HOMEPATH%\Start Menu\Programs\Startup\ServiceUpdate.url
- %APPDATA%\ServiceUpdate.exe
- %HOMEPATH%\Start Menu\Programs\Startup\ServiceUpdate.exe
- %APPDATA%\ServiceUpdate.exe
- '16#.#32.199.246':6522
- '%APPDATA%\ServiceUpdate.exe'
- '<SYSTEM32>\schtasks.exe' /create /tn NYAN /tr "<Full path to file>" /sc minute /mo 1
- '<SYSTEM32>\schtasks.exe' /create /tn NYAN /tr "%APPDATA%\ServiceUpdate.exe" /sc minute /mo 1