Техническая информация
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\GLB1.tmp
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001e.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001f.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0020.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0021.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0022.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0023.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0024.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0025.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0026.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0027.TMP
- %TEMP%\SET4.tmp
- %ProgramFiles%\McAfee.com\Shared\mcappins.exe
- %ProgramFiles%\McAfee.com\Shared\mcappins.inf
- %ProgramFiles%\McAfee.com\Shared\mcinsres.dll
- <SYSTEM32>\mcinsctl.dll
- <SYSTEM32>\mcgdmgr.dll
- %TEMP%\mca5.tmp\mghtml.inf
- %TEMP%\mca5.tmp\mghtml.exe
- %TEMP%\mca5.tmp\dunzip32.dll
- %TEMP%\mca6.tmp\mghtml.inf
- %TEMP%\mca6.tmp\mghtml.exe
- %TEMP%\mca6.tmp\dunzip32.dll
- %TEMP%\mcaC.tmp\mghtml.inf
- %TEMP%\mcaC.tmp\mghtml.exe
- %TEMP%\mcaC.tmp\dunzip32.dll
- %TEMP%\mskins.ini
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\CAGRYDER.lpk
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001d.TMP
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\CAC37F11.lpk
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001c.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001a.TMP
- %TEMP%\GLC2.tmp
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0000.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0001.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0002.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0003.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0004.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0005.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0006.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0007.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0008.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0009.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000a.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000b.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000c.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000d.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000e.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000f.TMP
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0010.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0011.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0012.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0013.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0014.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0015.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0016.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0017.TMP
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0018.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0019.TMP
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001b.TMP
- %ALLUSERSPROFILE%\Application Data\McAfee.com\Agent\agntclient.log
Удаляет следующие файлы:
- %TEMP%\GLC2.tmp
- %TEMP%\mca5.tmp\dunzip32.dll
- %TEMP%\mca5.tmp\mghtml.exe
- %TEMP%\mca5.tmp\mghtml.inf
- %TEMP%\GLB1.tmp
- %TEMP%\mcaC.tmp\dunzip32.dll
- %TEMP%\mcaC.tmp\mghtml.exe
- %TEMP%\mcaC.tmp\mghtml.inf
Перемещает следующие файлы:
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0000.TMP в %TEMP%\install_sko_7020_en-us.tmp\agentins.inf
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001a.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\agentcfg.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001b.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\agentdui.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001c.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\agentsub.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001d.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\agentupd.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001e.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mcdetect.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH001f.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\McGDMgr.dll
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0020.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mcinsctl.dll
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0021.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mcscoem.cab
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000b.TMP в %TEMP%\install_sko_7020_en-us.tmp\mskins.inf
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0022.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mctskshd.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0024.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mcunilib.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0025.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mghtml.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0026.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mskreg.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0027.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\regwiz.cab
- %TEMP%\mca6.tmp\mghtml.exe в %ProgramFiles%\McAfee.com\Shared\SET9.tmp
- %ProgramFiles%\McAfee.com\Shared\SET9.tmp в %ProgramFiles%\McAfee.com\Shared\mghtml.exe
- %TEMP%\mca6.tmp\dunzip32.dll в %ProgramFiles%\McAfee.com\Shared\SETA.tmp
- %ProgramFiles%\McAfee.com\Shared\SETA.tmp в %ProgramFiles%\McAfee.com\Shared\dunzip32.dll
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0018.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKServe.cab
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0019.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\agent.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0017.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKResou.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0016.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKProto.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0015.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKFilte.cab
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0002.TMP в %TEMP%\install_sko_7020_en-us.tmp\agentver.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0003.TMP в %TEMP%\install_sko_7020_en-us.tmp\AgntIcfg.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0004.TMP в %TEMP%\install_sko_7020_en-us.tmp\AgOEMVer.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0005.TMP в %TEMP%\install_sko_7020_en-us.tmp\autorun.inf
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0006.TMP в %TEMP%\install_sko_7020_en-us.tmp\install.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0007.TMP в %TEMP%\install_sko_7020_en-us.tmp\McAppIns.exe
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0008.TMP в %TEMP%\install_sko_7020_en-us.tmp\mcappins.inf
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0009.TMP в %TEMP%\install_sko_7020_en-us.tmp\mcinsres.dll
- %TEMP%\mca6.tmp\mghtml.inf в %ProgramFiles%\McAfee.com\Shared\SETB.tmp
- %TEMP%\install_sko_7020_en-us.tmp\shared\~GLH0023.TMP в %TEMP%\install_sko_7020_en-us.tmp\shared\mcuicfg.cab
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000a.TMP в %TEMP%\install_sko_7020_en-us.tmp\mskcfg.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000d.TMP в %TEMP%\install_sko_7020_en-us.tmp\mskver.ini
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000e.TMP в %TEMP%\install_sko_7020_en-us.tmp\setup.exe
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000f.TMP в %TEMP%\install_sko_7020_en-us.tmp\SetupRes.dll
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0010.TMP в %TEMP%\install_sko_7020_en-us.tmp\Silent.ini
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0011.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKClien.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0012.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKCommo.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0013.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKDicti.cab
- %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\~GLH0014.TMP в %TEMP%\install_sko_7020_en-us.tmp\msk\en-us\us\MSKExtra.cab
- %TEMP%\install_sko_7020_en-us.tmp\~GLH0001.TMP в %TEMP%\install_sko_7020_en-us.tmp\agentins.ui
- %TEMP%\install_sko_7020_en-us.tmp\~GLH000c.TMP в %TEMP%\install_sko_7020_en-us.tmp\mskins.ui
- %ProgramFiles%\McAfee.com\Shared\SETB.tmp в %ProgramFiles%\McAfee.com\Shared\mghtml.inf
Другое:
Ищет следующие окна:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
Создает и запускает на исполнение:
- '%TEMP%\GLB1.tmp' 4736 <Полный путь к файлу>
- '%ProgramFiles%\McAfee.com\Shared\mghtml.exe' -regserver
- '%ProgramFiles%\McAfee.com\Shared\mghtml.exe' -Embedding
