Technical Information
- [<HKLM>\System\CurrentControlSet\Services\SuperProServer] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\SuperProServer] 'ImagePath' = '%WINDIR%\server.exe'
- %ProgramFiles%\apppath\n62.dll
- %WINDIR%\server.exe
- http://www.ms####luo.com:9999/N62.jpg via ms###gluo.com
- DNS ASK ms###gluo.com
- '%WINDIR%\server.exe'