Accidental discovery, proxy script address somehow changed to other address, use tinder set up under the rules, find out a file, time to rewrite the registry agent address
This file once, about 5 minutes to implement, monitoring is to perform yourself, script address can access, to the root of the problem, there is no set automatically intercept, didn't stop him to run automatically, please answer
Operating process: C: \ ProgramData \ Microsoft \ MicrosoftUp
The command line: regedit. Exe/s C: \ \ ProgramData \ Microsoft \ MicrosoftUp, Microsoft Windows Registry Update Backup
Protective project: protect the file
Operational objectives: [reading] C: \ ProgramData \ Microsoft \ MicrosoftUp
Operating results: has blocked