Behavior Details

1. Dropped files:
SQMHelper
Under the folder
\Device\Afd

2. Creates Registry:

Adds registry data
223.5.5.5,8.8.8.8

Under the key:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{D572B176-8ECB-491D-9424-FA4466CA813B}\NameServer

Removal Instructions

1. Update the copy of K7 security to the latest version.
2. Scan the system completely and remove the detected files.
3. Open Windows registry editor.
4. Delete the registry data
223.5.5.5,8.8.8.8

Under the key:
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\Tcpip\Parameters\Interfaces\{D572B176-8ECB-491D-9424-FA4466CA813B}\NameServer
5. Close the Windows registry.
6. Restart the machine.