Technical Information
- %WINDIR%\tasks\malwareremovalbot scheduled scan.job
- <SYSTEM32>\tasks\malwareremovalbot scheduled scan
- %WINDIR%\tasks\malwareremovalbot system startup.job
- <SYSTEM32>\tasks\malwareremovalbot system startup
- %APPDATA%\malwareremovalbot\log\2020 mar 03 - 12_41_43 pm_927.log
- http://sp#####db3.2squared.com/update/info
- DNS ASK sp#####db3.2squared.com