Техническая информация
- %WINDIR%\Tasks\Lyrics Search Update.job
- '%PROGRAM_FILES%\LyricSearch\LyricSearchUp.exe' /install /report=installed
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\LyricSearch\lfind.dll"
- chrome.exe
- firefox.exe
- iexplore.exe
- %PROGRAM_FILES%\LyricSearch\FF\chrome\content\overlay.xul
- %PROGRAM_FILES%\LyricSearch\Uninstall.exe
- %PROGRAM_FILES%\LyricSearch\FF\chrome\content\icon.png
- %PROGRAM_FILES%\LyricSearch\FF\chrome\content\main.js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\installed[1].0
- %TEMP%\upr4.tmp
- %TEMP%\nsj3.tmp\nsHelper.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\user.js
- %PROGRAM_FILES%\LyricSearch\LyricSearchUp.exe
- %PROGRAM_FILES%\LyricSearch\chrome.crx
- %TEMP%\nsi2.tmp
- %TEMP%\nsj3.tmp\nsProcess.dll
- %PROGRAM_FILES%\LyricSearch\FF\chrome.manifest
- %PROGRAM_FILES%\LyricSearch\FF\install.rdf
- %PROGRAM_FILES%\LyricSearch\chrome.manifest
- %PROGRAM_FILES%\LyricSearch\lfind.dll
- %TEMP%\nsj3.tmp\nsProcess.dll
- %TEMP%\nsj3.tmp\nsHelper.dll
- 'me#.##onlock.net':80
- 'localhost':1036
- me#.##onlock.net/report/installed/?af#######################################################################################
- DNS ASK ku#.##onlock.net
- DNS ASK me#.##onlock.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'