Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Network DCE] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Network DCE] 'ImagePath' = '<SYSTEM32>\svchost.exe -k "Network DCE"'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\Network DCE\Parameters] 'ServiceDll' = '%ProgramFiles(x86)%\Google\1178837.dll'
- 'Network DCE' <SYSTEM32>\svchost.exe -k "Network DCE"
- %ProgramFiles(x86)%\google\1178837.dll
- %WINDIR%\syswow64\network dce.exe
- 'ip.cn':80
- http://ip.cn/index.php?ip####################
- DNS ASK ip.cn
- '%WINDIR%\syswow64\network dce.exe' "%ProgramFiles(x86)%\google\1178837.dll",MainThread
- '%WINDIR%\syswow64\svchost.exe' -k "Network DCE"