Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %WINDIR%\1.5.0.1.exe
- %TEMP%\cetrainers\cet2fcc.tmp\extracted\defines.lua
- %TEMP%\cetrainers\cet2fcc.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cet2fcc.tmp\1.4.0.1.exe
- %TEMP%\cetrainers\cet2fcc.tmp\cet_archive.dat
- %TEMP%\cetrainers\cetbc9.tmp\extracted\lua53-64.dll
- %TEMP%\cetrainers\cetbc9.tmp\extracted\1.4.0.1.exe
- %TEMP%\cetrainers\cetbc9.tmp\extracted\defines.lua
- %TEMP%\cetrainers\cetbc9.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetbc9.tmp\1.4.0.1.exe
- %TEMP%\cetrainers\cetbc9.tmp\cet_archive.dat
- %TEMP%\cetrainers\cetf062.tmp\extracted\lua53-64.dll
- %TEMP%\cetrainers\cetf062.tmp\extracted\1.4.0.1.exe
- %TEMP%\cetrainers\cetf062.tmp\extracted\defines.lua
- %TEMP%\cetrainers\cetf062.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cet2fcc.tmp\extracted\1.4.0.1.exe
- %TEMP%\cetrainers\cetf062.tmp\1.4.0.1.exe
- %WINDIR%\empty.exe
- %TEMP%\cetrainers\cetd652.tmp\extracted\lua53-64.dll
- %TEMP%\cetrainers\cetd652.tmp\extracted\1.4.0.1.exe
- %TEMP%\cetrainers\cetd652.tmp\extracted\defines.lua
- %TEMP%\cetrainers\cetd652.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetd652.tmp\1.4.0.1.exe
- %TEMP%\cetrainers\cetd652.tmp\cet_archive.dat
- %WINDIR%\1.4.0.1.exe
- %TEMP%\cetrainers\cetbf11.tmp\extracted\lua53-64.dll
- %TEMP%\cetrainers\cetbf11.tmp\extracted\1.5.0.1.exe
- %TEMP%\cetrainers\cetbf11.tmp\extracted\defines.lua
- %TEMP%\cetrainers\cetbf11.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetbf11.tmp\1.5.0.1.exe
- %TEMP%\cetrainers\cetbf11.tmp\cet_archive.dat
- %TEMP%\cetrainers\cetf062.tmp\cet_archive.dat
- %TEMP%\cetrainers\cet2fcc.tmp\extracted\lua53-64.dll
Присваивает атрибут 'скрытый' для следующих файлов
- %WINDIR%\1.5.0.1.exe
- %WINDIR%\1.4.0.1.exe
Удаляет следующие файлы
- %TEMP%\cetrainers\cetd652.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetbf11.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetf062.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cetbc9.tmp\extracted\cet_trainer.cetrainer
- %TEMP%\cetrainers\cet2fcc.tmp\extracted\cet_trainer.cetrainer
Другое
Ищет следующие окна
- ClassName: 'BUTTON' WindowName: ''
- ClassName: 'Edit' WindowName: ''
- ClassName: 'ComboBox' WindowName: ''
- ClassName: 'msctls_trackbar32' WindowName: ''
- ClassName: 'msctls_progress32' WindowName: ''
- ClassName: 'ListBox' WindowName: ''
- ClassName: 'ComboLBox' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: 'SysTreeView32' WindowName: ''
- ClassName: 'SysIPAddress32' WindowName: ''
- ClassName: 'SysDateTimePick32' WindowName: ''
- ClassName: 'msctls_updown32' WindowName: ''
- ClassName: 'SysHeader32' WindowName: ''
- ClassName: '' WindowName: ''
Создает и запускает на исполнение
- '%WINDIR%\1.5.0.1.exe'
- '%TEMP%\cetrainers\cetbf11.tmp\1.5.0.1.exe' -ORIGIN:"%WINDIR%\"
- '%TEMP%\cetrainers\cetbf11.tmp\extracted\1.5.0.1.exe' "%TEMP%\cetrainers\CETBF11.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:%WINDIR%\"
- '%WINDIR%\1.4.0.1.exe'
- '%TEMP%\cetrainers\cetd652.tmp\1.4.0.1.exe' -ORIGIN:"%WINDIR%\"
- '%TEMP%\cetrainers\cetd652.tmp\extracted\1.4.0.1.exe' "%TEMP%\cetrainers\CETD652.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:%WINDIR%\"
- '%WINDIR%\empty.exe' 2932
- '%TEMP%\cetrainers\cetf062.tmp\1.4.0.1.exe' -ORIGIN:"%WINDIR%\"
- '%TEMP%\cetrainers\cetf062.tmp\extracted\1.4.0.1.exe' "%TEMP%\cetrainers\CETF062.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:%WINDIR%\"
- '%TEMP%\cetrainers\cetbc9.tmp\1.4.0.1.exe' -ORIGIN:"%WINDIR%\"
- '%TEMP%\cetrainers\cetbc9.tmp\extracted\1.4.0.1.exe' "%TEMP%\cetrainers\CETBC9.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:%WINDIR%\"
- '%TEMP%\cetrainers\cet2fcc.tmp\1.4.0.1.exe' -ORIGIN:"%WINDIR%\"
- '%TEMP%\cetrainers\cet2fcc.tmp\extracted\1.4.0.1.exe' "%TEMP%\cetrainers\CET2FCC.tmp\extracted\CET_TRAINER.CETRAINER" "-ORIGIN:%WINDIR%\"
- '%WINDIR%\empty.exe' 2932' (со скрытым окном)
