Техническая информация
- %APPDATA%\umcfg.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\umcfg[1].ini
- %APPDATA%\udconf.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\uup[1].html
- %PROGRAM_FILES%\Kingsoft\KSFA\downldr.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\mbrinstall[1].html
- <DRIVERS>\bc.sys
- <Текущая директория>\KS_KILLER\bc.sys
- %TEMP%\KillSola.dll
- <DRIVERS>\ksapi.sys
- <Текущая директория>\KS_KILLER\ksapi.sys
- <Текущая директория>\KS_KILLER\ksapi.dll
- <Текущая директория>\KS_KILLER\ksapi.sys
- 'pu##.##.kingsoft.com':80
- 'no.##caldomain':80
- 'if#.#uba.net':80
- 'localhost':1037
- 'cu###.www.duba.net':80
- pu##.##.kingsoft.com/ksfak/mbrinstall.html
- no.##caldomain/
- pu##.##.kingsoft.com/ksfak/uup.html
- cu###.www.duba.net/duba/tools/dubatools/usb/mbrconfig.txt
- cu###.www.duba.net/duba/tools/dubatools/usb/umcfg.ini
- if#.#uba.net/urlrcv.php?uu####################################################################################################################
- DNS ASK pu##.##.kingsoft.com
- DNS ASK no.##caldomain
- DNS ASK cu###.www.duba.net
- DNS ASK if#.#uba.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''