Technical Information
- [HKLM\System\CurrentControlSet\Services\thenight138] 'ImagePath' = '<Current directory>\thenight138.sys'
- 'thenight138' <Current directory>\thenight138.sys
- %TEMP%\ce974.tmp
- <Current directory>\thenight138.sys
- %WINDIR%\temp\udded89.tmp
- %TEMP%\ce974.tmp
- %WINDIR%\temp\udded89.tmp
- <Current directory>\thenight138.sys
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''