Техническая информация
- Процесс ~cheathappenstrainer1322.tmp, модуль ntdll.dll
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- %HOMEPATH%\cheathappens\work\runtime\cheathappens.net
- %HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer1322.tmp
- %TEMP%\evbf176.tmp
- %TEMP%\evbfb0c.tmp
- %TEMP%\evbfb1d.tmp
- %TEMP%\evb937.tmp
- %TEMP%\evb9a5.tmp
- %TEMP%\evba04.tmp
- %TEMP%\evba63.tmp
- %HOMEPATH%\cheathappens\work\runtime\inetcheck.dat
- 'ch####appens.com':80
- 'ch####appens.com':443
- '19#.#32.214.172':80
- http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?f9##############
- http://www.ch####appens.com/unauthorized/127878380.zip
- http://www.ch####appens.com/trainer_versions/20882_E.txt
- 'ch####appens.com':443
- DNS ASK ch####appens.com
- '%HOMEPATH%\cheathappens\work\runtime\~cheathappenstrainer1322.tmp' "16744820695884"