Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\windows.lnk
- <Current directory>:{7a007800-5100-6100-6900-710042004600}
- %ALLUSERSPROFILE%\isolated storage\{7a007800-5100-6100-6900-710042004600}
- %APPDATA%\microsoft\windows\templates\windows.lnk
- 'xr####441.ddns.net':2024
- DNS ASK xr####441.ddns.net