Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Client.exe' = '"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe" ..'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Client.exe' = '"%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\mblctr.url
- hidden files
- %WINDIR%\microsoft.net\framework\v2.0.50727\msbuild.exe
- %HOMEPATH%\mblctr\mblctr.vbs
- %HOMEPATH%\mblctr\systempropertieshardware.exe
- 've#####20.duckdns.org':7782
- DNS ASK ve#####20.duckdns.org
- '%WINDIR%\microsoft.net\framework\v2.0.50727\msbuild.exe'