Technical Information
- [<HKLM>\System\CurrentControlSet\Services\Google Online Services] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Google Online Services] 'ImagePath' = '<Full path to file> -A'
- 'Google Online Services' <Full path to file> -A
- %WINDIR%\syswow64\config\systemprofile\appdata\roaming\microsoft\windows\cookies\system@neiron2008[1].txt
- %WINDIR%\syswow64\config\systemprofile\appdata\roaming\microsoft\windows\cookies\system@neiron2008[1].txt
- 'ne###n2008.com':80
- DNS ASK ne###n2008.com