Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\PCHunter32am] 'ImagePath' = '%TEMP%\RarSFX0\PCHunter32am.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\PCHunter32am] 'Start' = '00000001'
- '%TEMP%\RarSFX0\PCHunter32.exe'
- %TEMP%\RarSFX0\PCHunter32am.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pchunter_free[1]
- %TEMP%\RarSFX0\datastr.url
- %TEMP%\RarSFX0\PCHunter32.exe
- %TEMP%\RarSFX0\PCHunter32am.sys
- 'localhost':1040
- 'www.ep###soft.com':80
- http://www.ep###soft.com/pchunter/pchunter_free
- http://www.ep###soft.com/PCHunter_StandardV1.51=F318BA1AA1A0C0EEDE17DEE55CC996C1077F0F0B56CCFE66803E826050B8690AD88EE07A976C9EA511F78299F358CEFA
- DNS ASK www.ep###soft.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''