Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\Mnopqr Tuvwxyab Def] 'ImagePath' = '%WINDIR%\uusmuk.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Mnopqr Tuvwxyab Def] 'Start' = '00000002'
- %WINDIR%\uusmuk.exe
- '12###.xicp.net':923
- '11#.#32.215.83':8183
- DNS ASK 12###.xicp.net
- '%WINDIR%\uusmuk.exe'