Technical Information
- %APPDATA%\microsoft\windows\start menu\programs\startup\atlthunk.url
- %WINDIR%\syswow64\dllhost.exe
- %HOMEPATH%\maxxaudiometers64\avrt.exe
- %HOMEPATH%\maxxaudiometers64\atlthunk.vbs
- 'kk####o.ddns.net':8787
- DNS ASK kk####o.ddns.net
- '%WINDIR%\syswow64\dllhost.exe'