Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\pp64ah] 'Start' = '00000001'
- [<HKLM>\System\CurrentControlSet\Services\pp64ah] 'ImagePath' = 'C:\pp64ah.sys'
- 'pp64ah' C:\pp64ah.sys
- C:\pp64.exe
- C:\pp64ah.sys
- C:\pp64ah.sys
- 'ep###soft.com':80
- http://www.ep###soft.com/pchunter/pchunter_free
- DNS ASK ep###soft.com
- 'C:\pp64.exe'