Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'PCHealth' = '%APPDATA%\PCHealth\PCHealth.pif'
- %APPDATA%\PCHealth\PCHealth.pif
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- %APPDATA%\PCHealth\PCHealth.pif
- %APPDATA%\PCHealth\PCHealth.pif
- 'we##8582.in':80
- '11#.#11.111.7':80
- '11#.#11.111.4':80
- '11#.#11.111.6':80
- we##8582.in/index.php?r=#####
- 11#.#11.111.6/index.php?r=###
- 11#.#11.111.7/index.php?r=###
- DNS ASK we##8582.in
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Indicator' WindowName: ''