Technical Information
- [<HKLM>\System\CurrentControlSet\Services\QAXFcSvc] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\QAXFcSvc] 'ImagePath' = '"<Full path to file>" /svc'
- 'QAXFcSvc' "<Full path to file>" /svc
- <Current directory>\qeshotfix.dll
- <Current directory>\qeshotfix.dll
- <Current directory>\qeshotfix.dll
- 'dl.##anxin.com':80
- http://dl.##anxin.com/fc/QesHotfix.dll
- DNS ASK dl.##anxin.com