Technical Information
- [<HKLM>\SYSTEM\CURRENTCONTROLSET\services\Winmgmt] 'Start' = '00000002'
- 'ne#####.funshion.com':80
- 'do####ad.uusee.com':80
- http://ne#####.funshion.com/download/silent/64352/FunshionInstall.exe
- DNS ASK ne#####.funshion.com
- DNS ASK d1.###nxiaba.net
- DNS ASK do####ad.uusee.com