Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Nopqrs Uvwxyabc Efg] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Nopqrs Uvwxyabc Efg] 'ImagePath' = '%ProgramFiles(x86)%\Arab\Arab.jpg'
- %ProgramFiles(x86)%\arab\arab.jpg
- 'ch###ewoer.xyz':3336
- DNS ASK ch###ewoer.xyz
- '%ProgramFiles(x86)%\arab\arab.jpg'
- '%ProgramFiles(x86)%\arab\arab.jpg' Win7