Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\svihotq] 'ImagePath' = 'C:\system16\svnsrq32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\svihotq] 'Start' = '00000002'
- C:\system16\svnsrq64.exe
- C:\system16\svnsrq32.exe
- 'C:\system16\svnsrq32.exe'