Technical Information
- [<HKLM>\System\CurrentControlSet\Services\UxSms] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Themes] 'Start' = '00000002'
- C:\softxlic.ini
- from <Full path to file> to <Current directory>\8juv1u.exe
- 'xc##fdc.com':80
- http://www.xc##fdc.com/kss_io/io.php?v=###########################################
- DNS ASK xc##fdc.com
- '%WINDIR%\syswow64\powercfg.exe' /h off