Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f92B23AB-Dsbc-VQmx-73y1-0000F87A469H}] 'StubPath' = '%APPDATA%\M6Wumf\9bE7ls.exe'
- %WINDIR%\Fonts\RQID.ttf
- %APPDATA%\M6Wumf\9bE7ls.exe
- %APPDATA%\M6Wumf\LiveUDHelper.dll
- %WINDIR%\Fonts\RunQiu.ttf
- %WINDIR%\Fonts\HanQiuSheng.ttf
- %TEMP%\data.tmp
- %TEMP%\time.txt
- %TEMP%\data.tmp
- %TEMP%\time.txt
- 'localhost':1036
- 'da##.#unqiusoft.com':80
- http://da##.#unqiusoft.com/plug/jc_104.txt
- http://da##.#unqiusoft.com/time.php
- DNS ASK da##.#unqiusoft.com