Technical Information
- [HKLM\System\CurrentControlSet\Services\cuucmpsorm] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\cuucmpsorm] 'ImagePath' = '"%WINDIR%\cuucmpsorm.exe" /srv'
- 'cuucmpsorm' "%WINDIR%\cuucmpsorm.exe" /srv
- %WINDIR%\cuucmpsorm.exe
- %TEMP%\169f4ea.tmp
- %TEMP%\169f4ea.tmp
- 'do#####d.cacaotools.com':80
- http://do#####d.cacaotools.com/cacaoupdater/download/cacaotools_updater_m.exe
- http://www.ca###tools.com/cacaoupdater/config.php?q=#############################################################################################################################################...
- DNS ASK do#####d.cacaotools.com
- DNS ASK ca###tools.com