Infection repeatedly adds scheduled tasks and increases traffic to the same C2 domain

https://isc.sans.edu/diary/32628