Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = '%ProgramFiles%\Mozilla\ryogiqg.dll'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows] 'LoadAppInit_DLLs' = '00000001'
- <SYSTEM32>\tasks\efabovn
- %ProgramFiles%\mozilla\nengnjg.exe
- %ProgramFiles%\mozilla\ryogiqg.dll
- '%ProgramFiles%\mozilla\nengnjg.exe' -nvduqfg
- '%ProgramFiles%\mozilla\nengnjg.exe' -nvduqfg' (with hidden window)