Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\netservice] 'Start' = '00000002'
- %ALLUSERSPROFILE%\Favorites\netservice.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- 360tray.exe
- %ALLUSERSPROFILE%\Favorites\netservice.exe
- %ALLUSERSPROFILE%\Favorites\plug\001.dll
- 'www.yw##.com':80
- www.yw##.com/ip.jpg
- DNS ASK www.yw##.com