Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Starteup' = '%APPDATA%\Starteup\Starteup.exe'
- starteup.exe
- %APPDATA%\thunderbird\profiles.ini
- %APPDATA%\opera software\opera stable\login data
- <Full path to file>
- from <Full path to file> to %APPDATA%\starteup\starteup.exe
- '79.##4.225.121':2555