server27.01domain.net (74.86.116.171)

Remote Host Port Number
74.86.116.171 85

JOIN #0x9# 12xmas25
NICK _00-USA-XP-21180
USER http lol lol ovened

PASS ms09xx

Registry Modifications

* The following Registry Key was created:
o HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun

* The newly created Registry Value is:
o [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionRun]
+ svchost.exe = “%AppData%svchost.exe”

so that svchost.exe runs every time Windows starts

Categories: Uncategorized