Technical Information
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'shspCMP' = 'rundll32.exe "%LOCALAPPDATA%\shspCMP\shspCMP.dll", DllInit'
- Handler for all processes: %LOCALAPPDATA%\shspCMP\shspCMP.dll
- iexplore.exe process, urlmon.dll module
- %TEMP%\sqkbdgame.dll
- %LOCALAPPDATA%\shspcmp\shspcmp.dll
- %TEMP%\sqkbdgame.dll
- '%WINDIR%\syswow64\regsvr32.exe' /i /n /s "%TEMP%\sqkbdGame.dll"
- '%WINDIR%\syswow64\rundll32.exe' "%LOCALAPPDATA%\shspCMP\shspCMP.dll", DllInit