Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'pc-up' = '%PROGRAM_FILES%\pc-up\pcup.exe'
- <SYSTEM32>\cmd.exe /c C:\$$wefd84122098.bat
- %PROGRAM_FILES%\pc-up\pcupwcher.exe
- %PROGRAM_FILES%\pc-up\pcup.exe
- C:\$$wefd84122098.bat
- %PROGRAM_FILES%\pc-up\pcuppopd.dll
- %PROGRAM_FILES%\pc-up\pcuphk.dll
- %PROGRAM_FILES%\pc-up\pcupupdater.exe
- %CommonProgramFiles%\pc-up\pcupuninst.exe
- 'pc##p.co.kr':80
- 'do##.#c-up.co.kr':80
- do##.#c-up.co.kr/pcupwcher.exe
- do##.#c-up.co.kr/pcuppopd.dll
- pc##p.co.kr/app_linkage/app_install.php?ad##############################
- do##.#c-up.co.kr/pcup.exe
- do##.#c-up.co.kr/pcuphk.dll
- do##.#c-up.co.kr/update.php
- do##.#c-up.co.kr/pcupuninst.exe
- do##.#c-up.co.kr/pcupupdater.exe
- DNS ASK pc##p.co.kr
- DNS ASK do##.#c-up.co.kr
- ClassName: 'MS_WINHELP' WindowName: ''