Technical Information
- [HKLM\System\CurrentControlSet\Services\Rsnoht zerxnhir] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\Rsnoht zerxnhir] 'ImagePath' = '%ProgramFiles(x86)%\Microsoft Qfbztq\Ijmhyst.exe'
- 'Rsnoht zerxnhir' %ProgramFiles(x86)%\Microsoft Qfbztq\Ijmhyst.exe
- %ProgramFiles(x86)%\microsoft qfbztq\ijmhyst.exe
- %ProgramFiles(x86)%\microsoft qfbztq\ijmhyst.exe
- from <Full path to file> to %WINDIR%\syswow64\1189304.bak
- '11#.#23.237.248':5125
- '11#.#23.237.248':5125
- '%ProgramFiles(x86)%\microsoft qfbztq\ijmhyst.exe'
- '%ProgramFiles(x86)%\microsoft qfbztq\ijmhyst.exe' Win7