Техническая информация
- '<SYSTEM32>\taskkill.exe' /IM patcher_cf.exe
- '<SYSTEM32>\taskkill.exe' /IM crossfire.exe
- %WINDIR%\temp\cab9fa8.tmp
- %WINDIR%\temp\tar9fa9.tmp
- %WINDIR%\temp\cabb617.tmp
- %WINDIR%\temp\tarb618.tmp
- %WINDIR%\temp\cabb696.tmp
- %WINDIR%\temp\tarb697.tmp
- %WINDIR%\temp\cabcc49.tmp
- %WINDIR%\temp\tarcc4a.tmp
- %WINDIR%\temp\cabf8a8.tmp
- %WINDIR%\temp\tarf8b9.tmp
- %WINDIR%\temp\cab9fa8.tmp
- %WINDIR%\temp\tar9fa9.tmp
- %WINDIR%\temp\cabb617.tmp
- %WINDIR%\temp\tarb618.tmp
- %WINDIR%\temp\cabb696.tmp
- %WINDIR%\temp\tarb697.tmp
- %WINDIR%\temp\cabcc49.tmp
- %WINDIR%\temp\tarcc4a.tmp
- %WINDIR%\temp\cabf8a8.tmp
- %WINDIR%\temp\tarf8b9.tmp
- 'xh##k.net':443
- 'pk#.goog':80
- http://pk#.goog/gsr1/gsr1.crt
- 'xh##k.net':443
- DNS ASK xh##k.net
- DNS ASK pk#.goog
- ClassName: '' WindowName: ''
- ClassName: '' WindowName: 'MHTabWidgetClassWindow'
- ClassName: '' WindowName: 'statusBarWindow'
- ClassName: '' WindowName: 'IDA: Quick Start'
- ClassName: '' WindowName: 'Monitor New Process'
- '<SYSTEM32>\taskkill.exe' /IM patcher_cf.exe' (со скрытым окном)
- '<SYSTEM32>\taskkill.exe' /IM crossfire.exe' (со скрытым окном)