Technical Information
- %WINDIR%\Tasks\LifeCare.job
- <SYSTEM32>\Tasks\LifeCare
- C:\ProgramData\{67ef2e10-f136-fe2c-67ef-f2e10f13b843}\<Virus name>.dat
- C:\ProgramData\{67ef2e10-f136-fe2c-67ef-f2e10f13b843}\<Virus name>.exe
- DNS ASK ce####-ring.link
- DNS ASK ge####uesee.info
- DNS ASK ge###luesee.com
- DNS ASK dn#.##ftncsi.com
- ClassName: 'Shell_TrayWnd' WindowName: ''