Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Sytem32' = '%TEMP%\v-Minecraft.exe'
- %TEMP%\v-Minecraft.exe
- %APPDATA%\Sytem32
- '27.#.69.215':25565
- '%TEMP%\v-Minecraft.exe'
- '<SYSTEM32>\schtasks.exe' /create /sc minute /mo 1 /tn "Sytem32" /tr "%TEMP%\v-Minecraft.exe"