Technical Information
- [<HKLM>\SYSTEM\CONTROLSET003\Services\msuiqx] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\msuiqx] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\msuiqx] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k msuiqx
- <SYSTEM32>\fzjfvr.dll
- <SYSTEM32>\0004d8f7.sys
- 'gu#####qing.3322.org':7760
- DNS ASK gu#####qing.3322.org