Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationalxnc] 'Start' = '00000002'
- C:\Documents and Settings\UserData.exe
- <SYSTEM32>\svchost.exe
- C:\Documents and Settings\UserData.exe
- 'go#####ragon.3322.org':1977
- DNS ASK go#####ragon.3322.org