Technical Information
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- 'fastuserswitchingcompatibility' <SYSTEM32>\svchost.exe -k netsvcs
- <Current directory>\fvtcgqrunt
- %TEMP%\kyuponqpup.log
- <Current directory>\fvtcgqrunt
- from %TEMP%\kyuponqpup.log to %HOMEPATH%\applic~1\xkwco\luqni.lib
- DNS ASK cf###5.3322.org