Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\360saf12] 'Start' = '00000002'
- '%WINDIR%\360saf1.exe'
- '<SYSTEM32>\2d.exe'
- %WINDIR%\360saf1.exe
- <SYSTEM32>\2d.exe
- <Current directory>\superec.ProcessMemory2.sys
- %WINDIR%\360saf1.exe
- <SYSTEM32>\2d.exe
- '93#.##fwaigua.biz':931
- DNS ASK 93#.##fwaigua.biz
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'