Техническая информация
- '<SYSTEM32>\taskkill.exe' /IM patcher_cf.exe
- '<SYSTEM32>\taskkill.exe' /IM crossfire.exe
- %WINDIR%\temp\cab7954.tmp
- %WINDIR%\temp\tar7955.tmp
- %WINDIR%\temp\cab938a.tmp
- %WINDIR%\temp\tar938b.tmp
- %WINDIR%\temp\cab93e9.tmp
- %WINDIR%\temp\tar93ea.tmp
- %WINDIR%\temp\cabaa1a.tmp
- %WINDIR%\temp\taraa1b.tmp
- %WINDIR%\temp\cabd679.tmp
- %WINDIR%\temp\tard67a.tmp
- %WINDIR%\temp\cab7954.tmp
- %WINDIR%\temp\tar7955.tmp
- %WINDIR%\temp\cab938a.tmp
- %WINDIR%\temp\tar938b.tmp
- %WINDIR%\temp\cab93e9.tmp
- %WINDIR%\temp\tar93ea.tmp
- %WINDIR%\temp\cabaa1a.tmp
- %WINDIR%\temp\taraa1b.tmp
- %WINDIR%\temp\cabd679.tmp
- %WINDIR%\temp\tard67a.tmp
- 'xh##k.net':443
- 'pk#.goog':80
- http://pk#.goog/gsr1/gsr1.crt
- 'xh##k.net':443
- DNS ASK xh##k.net
- DNS ASK pk#.goog
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: 'MHTabWidgetClassWindow'
- ClassName: '' WindowName: 'statusBarWindow'
- ClassName: '' WindowName: 'IDA: Quick Start'
- ClassName: '' WindowName: 'Monitor New Process'
- '<SYSTEM32>\taskkill.exe' /IM patcher_cf.exe' (со скрытым окном)
- '<SYSTEM32>\taskkill.exe' /IM crossfire.exe' (со скрытым окном)