Technical Information
- <SYSTEM32>\tasks\winjoinupd
- %APPDATA%\winselectupd\winjoinupd
- %APPDATA%\winselectupd\result
- '94.##3.82.167':80
- http://94.##3.82.167/ins2.php
- http://94.##3.82.167/get2.php
- '<SYSTEM32>\schtasks.exe' /create /tn "WinJoinUPD" /f /sc MINUTE /MO 10 /tr "%APPDATA%\WinSelectUPD\TOPb2.exe"' (with hidden window)
- '<SYSTEM32>\schtasks.exe' /create /tn "WinJoinUPD" /f /sc MINUTE /MO 10 /tr "%APPDATA%\WinSelectUPD\TOPb2.exe"