Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdater' = '"<Full path to file>" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\<File name>.exe
- %TEMP%\<File name>.exe
- %LOCALAPPDATA%\get_cliboard_address\<File name>.exe_url_yfmjktcj0cyt3jis1keopnl3obsu3tz1\1.0.0.0\sey4xxk1.newcfg
- from %LOCALAPPDATA%\get_cliboard_address\<File name>.exe_url_yfmjktcj0cyt3jis1keopnl3obsu3tz1\1.0.0.0\sey4xxk1.newcfg to %LOCALAPPDATA%\get_cliboard_address\<File name>.exe_url_yfmjktcj0cyt3jis1keopnl3obsu3tz1\1.0.0.0\user.config