Technical Information
- [HKLM\System\CurrentControlSet\Services\wgvdlk] 'ImagePath' = '%WINDIR%\Fonts\wgvdlk.sys'
- 'wgvdlk' %WINDIR%\Fonts\wgvdlk.sys
- %WINDIR%\fonts\wgvdlk.sys
- C:\aimbot.sys
- C:\move.dll
- %WINDIR%\fonts\wgvdlk.sys
- C:\aimbot.sys
- C:\move.dll
- <Full path to file>
- from <Full path to file> to %TEMP%\[0881ee4687a17c9ddc16641946bb28ec]
- '10#.#3.176.135':80