Technical Information
- '%ProgramFiles%\pc1004\pscreen.exe' (downloaded from the Internet)
- '%ProgramFiles%\pc1004\pc1004.exe' (downloaded from the Internet)
- <SYSTEM32>\uninstall.exe
- %HOMEPATH%\Desktop\CC?AAµ»c.lnk
- %ProgramFiles%\pc1004\pscreen.exe2
- %ProgramFiles%\pc1004\pc1004.exe2
- %ProgramFiles%\pc1004\DB.DLL2
- from %ProgramFiles%\pc1004\pscreen.exe2 to %ProgramFiles%\pc1004\pscreen.exe
- from %ProgramFiles%\pc1004\pc1004.exe2 to %ProgramFiles%\pc1004\pc1004.exe
- from %ProgramFiles%\pc1004\DB.DLL2 to %ProgramFiles%\pc1004\DB.DLL
- 'my###004.com':80
- 'sy#.##pc1004.com':80
- http://sy#.##pc1004.com/program/pscreen.exe
- http://sy#.##pc1004.com/program/uninstall.exe
- http://my###004.com/bill_mod/bill_count.php?C_####################################
- http://sy#.##pc1004.com/program/ProgramVersion
- http://sy#.##pc1004.com/program/pc1004.exe
- http://sy#.##pc1004.com/program/DB.DLL
- DNS ASK my###004.com
- DNS ASK sy#.##pc1004.com
- ClassName: '' WindowName: 'pscreen'
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'pc1004'