This installs what appears to be a remote control software called NetSupport that silently contacts a server at 5.252.178.160 which appears to be located in Romania. If you tried installing this, check the folder "C:\ProgramData\regid.1993-06.com.microsoft\" on your machine and see if there's anything there. If so, your machine is probably infected. It also seems to mess with permissions and services to disable Windows Defender and a bunch of other security services and settings. |