Technical Information
- [<HKLM>\System\CurrentControlSet\Services\autochk] 'ImagePath' = '<DRIVERS>\autochk.sys'
- 'autochk' <DRIVERS>\autochk.sys
- <DRIVERS>\autochk.sys
- %WINDIR%\temp\uddf6fb.tmp
- %WINDIR%\temp\uddf6fb.tmp
- 'ne##.#ggdomain.net':53
- 'ne##.#ggdomain.net':80
- DNS ASK up####.nortonantivir.us
- DNS ASK dn#.##msupports.com
- DNS ASK ne##.#ggdomain.net
- '<SYSTEM32>\svchost.exe' -k ahsgqq