Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %WINDIR%\Tasks\Auslogics BoostSpeed Start BoostSpeed оn %USERNAME% logon.job
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\is-STOE8.tmp\reader.exe' "C:\~bcfpyqe.tmp" "(x32)HKEY_LOCAL_MACHINE\Software\Auslogics\BoostSpeed\6.x\Settings\\"
- '%PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDefrag.exe' -install
- '%TEMP%\is-STOE8.tmp\MetricsHelper.exe' "%TEMP%\is-STOE8.tmp\MetricsHelper.ini"
- '%PROGRAM_FILES%\Auslogics\BoostSpeed\BoostSpeed.exe' /UseTray /DelayScanAfterInstall
- '%TEMP%\is-QIMJS.tmp\~bcfpyqe.tmp' /SL5="$100E0,16617201,141312,C:\~bcfpyqe.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- 'C:\~bcfpyqe.tmp' \VERYSILENT \SUPPRESSMSGBOXES \NORESTART \SP-
- '%PROGRAM_FILES%\Auslogics\BoostSpeed\BoostSpeed.exe' -install -setautostart
- '%TEMP%\is-STOE8.tmp\DefaultBrowserFinder.exe' "Auslogics" "BoostSpeed" "boost-speed" "6.x"
Запускает на исполнение:
- '<SYSTEM32>\taskkill.exe' /f /im BoostSpeed.exe
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\Auslogics\BoostSpeed\TaskManagerHelper.Agent.x32.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDoctorChecker.x32.dll"
Изменения в файловой системе:
Создает следующие файлы:
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-JPU1T.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-182PF.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QOGNH.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-DKLQ3.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-AJ17N.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-36N91.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-CBDN3.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-V4C54.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-9FEK8.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-DVUJ6.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-IUR36.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-BUK6T.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-I68TO.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-6IO6K.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-2MFL4.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-Q3VF3.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-HB7F4.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-HBCLB.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-H16JD.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-LG1L0.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-B8K6K.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-J7PC2.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-FHUUI.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1R7C6.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-POJG9.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QLM5P.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-OMABK.tmp
- %HOMEPATH%\Desktop\Auslogics BoostSpeed.lnk
- %PROGRAM_FILES%\Auslogics\BoostSpeed\unins000.msg
- %PROGRAM_FILES%\Auslogics\BoostSpeed\unins000.dat
- %ALLUSERSPROFILE%\Start Menu\Programs\Auslogics\BoostSpeed\Auslogics BoostSpeed.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Auslogics\BoostSpeed\Auslogics Rescue Center.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Auslogics\BoostSpeed\Auslogics BoostSpeed on the Web.url
- %ALLUSERSPROFILE%\Application Data\Auslogics\BoostSpeed\6.x\Logs\BoostSpeedLogic.log
- %TEMP%\aut3.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\rtl160.bpl
- %TEMP%\8c42e135c9a7401099f952f092b952cd.dsmk
- %TEMP%\is-STOE8.tmp\reader.exe
- %TEMP%\is-STOE8.tmp\MetricsHelper.ini
- %ALLUSERSPROFILE%\Application Data\Auslogics\BoostSpeed\6.x\StatDB.xml
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Video\is-7R3VM.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-9AT31.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3UF0A.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1PB00.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3B8E2.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-683LQ.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-CN62Q.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-MIB0L.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-D2H3G.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-PP84E.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-HG9TE.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-MMNF6.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Lang\is-S4RG6.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-H4KEC.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-25D9C.tmp
- %TEMP%\is-STOE8.tmp\DefaultBrowserFinder.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-K5S5F.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-RP2QP.tmp
- %TEMP%\is-STOE8.tmp\DeskMetrics.dll
- %TEMP%\is-STOE8.tmp\MetricsHelper.exe
- %TEMP%\is-STOE8.tmp\sqlite3.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\is-BNGBJ.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3JQ75.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-LT3VP.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-UFSJ2.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\is-3LOUR.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-SJ4RE.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-08CNM.tmp
- %TEMP%\is-STOE8.tmp\EULA.rtf
- C:\~bcfpyqe.tmp
- %TEMP%\is-QIMJS.tmp\~bcfpyqe.tmp
- %TEMP%\is-STOE8.tmp\_isetup\_shfoldr.dll
- %TEMP%\aut1.tmp
- %TEMP%\phqrjdo
- %TEMP%\aut2.tmp
- %TEMP%\is-STOE8.tmp\SetupCustom.dll
- %TEMP%\is-STOE8.tmp\rtl160.bpl
- %TEMP%\is-STOE8.tmp\vcl160.bpl
- %TEMP%\is-STOE8.tmp\vclimg160.bpl
- %TEMP%\is-STOE8.tmp\ATUpdatersHelper.dll
- %TEMP%\is-STOE8.tmp\AxComponentsRTL.bpl
- %TEMP%\is-STOE8.tmp\AxComponentsVCL.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8IENA.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1T2JI.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-5KE52.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8JMHO.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-G84OV.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-4D86A.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-20OHN.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-OBUPQ.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-61KUM.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-GRBME.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QH7R8.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-JK4U7.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1GHD9.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8P555.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-PFTC3.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-S49OS.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-O9NJ4.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-F36CQ.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QG9BP.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1MPTP.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-U4JPK.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-BN981.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-0V7L9.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-07HKT.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-6KSA8.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-PFOEL.tmp
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-NV4R1.tmp
Присваивает атрибут 'скрытый' для следующих файлов:
- C:\~bcfpyqe.tmp
Удаляет следующие файлы:
- %TEMP%\is-STOE8.tmp\sqlite3.dll
- %TEMP%\is-STOE8.tmp\vcl160.bpl
- %TEMP%\is-STOE8.tmp\SetupCustom.dll
- %TEMP%\is-STOE8.tmp\reader.exe
- %TEMP%\is-STOE8.tmp\rtl160.bpl
- %TEMP%\aut3.tmp
- C:\~bcfpyqe.tmp
- %TEMP%\is-QIMJS.tmp\~bcfpyqe.tmp
- %TEMP%\is-STOE8.tmp\vclimg160.bpl
- %TEMP%\is-STOE8.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-STOE8.tmp\MetricsHelper.exe
- %TEMP%\is-STOE8.tmp\MetricsHelper.ini
- %TEMP%\is-STOE8.tmp\ATUpdatersHelper.dll
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- %TEMP%\phqrjdo
- %TEMP%\is-STOE8.tmp\DeskMetrics.dll
- %TEMP%\is-STOE8.tmp\EULA.rtf
- %TEMP%\is-STOE8.tmp\DefaultBrowserFinder.exe
- %TEMP%\is-STOE8.tmp\AxComponentsRTL.bpl
- %TEMP%\is-STOE8.tmp\AxComponentsVCL.bpl
Перемещает следующие файлы:
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-DKLQ3.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\FreeSpaceWiper.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-AJ17N.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DuplicateFileFinder.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1R7C6.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskExplorerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-6IO6K.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskWipeHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-36N91.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DuplicateFileFinderHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QOGNH.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\FileShredder.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-CBDN3.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\InternetOptimizer.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-JPU1T.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\FileRecovery.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-182PF.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\FileRecoveryHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-FHUUI.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskExplorer.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-Q3VF3.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDoctorChecker.x32.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-HB7F4.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TaskManagerHelper.Agent.x32.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-LG1L0.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TrackEraserHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-2MFL4.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ShellExtension.ContextMenu.x32.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-B8K6K.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDefrag.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-OMABK.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDoctor.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-J7PC2.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDoctorHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-POJG9.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskDefragHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QLM5P.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\cdefrag.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-IUR36.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\InternetOptimizerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-MMNF6.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\BoostSpeed.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Lang\is-S4RG6.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Lang\enu.lng
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1PB00.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\BrowserCareHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-MIB0L.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\BrowserCare.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-H4KEC.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\Applications.dat
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-HG9TE.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\Metrics.xml
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Video\is-7R3VM.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Video\welcome.wmv
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-D2H3G.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\main.ini
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\is-PP84E.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Data\SystemTop10.dat
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3UF0A.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TweakManagerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-V4C54.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\StartupManager.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-9FEK8.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\StartupManagerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-BUK6T.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\UninstallManager.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-I68TO.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\UninstallManagerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-DVUJ6.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\SystemInformation.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-CN62Q.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TaskManagerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-9AT31.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TweakManager.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3B8E2.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\SystemInformationHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-683LQ.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TaskManager.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-PFTC3.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ATUpdatersHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-S49OS.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DeskMetrics.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QG9BP.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ATToolsStdHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1MPTP.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ATPopupsHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-O9NJ4.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\MetricsHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-PFOEL.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Localizer.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-NV4R1.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DebugHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-U4JPK.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\sqlite3.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-6KSA8.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ProductHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-F36CQ.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\AxAnimation.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\is-BNGBJ.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\SetupCustom.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\is-3LOUR.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\Setup\MetricsHelper.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-K5S5F.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\unins000.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-RP2QP.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\EULA.rtf
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-SJ4RE.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\rtl160.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-LT3VP.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\AxComponentsRTL.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-UFSJ2.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\AxComponentsVCL.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-08CNM.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\vcl160.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-3JQ75.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\vclimg160.bpl
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-BN981.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\SendDebugLog.exe
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1GHD9.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\AxBrowsers.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-OBUPQ.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DiskCleanerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-QH7R8.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\VolumesHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-JK4U7.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ShellExtension.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-61KUM.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\RegistryCleanerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-HBCLB.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ServiceManagerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-H16JD.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\SpywareCheckerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-GRBME.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DSSrcAsync.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-25D9C.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\DSSrcWM.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-20OHN.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\TaskSchedulerHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8P555.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\CommonForms.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8JMHO.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\CommonForms.Site.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-0V7L9.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\ReportHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-07HKT.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\SettingsHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-G84OV.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\CommonForms.Routine.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-1T2JI.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\RescueCenterHelper.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-5KE52.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\RescueCenterForm.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-4D86A.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\CommonForms.Video.dll
- %PROGRAM_FILES%\Auslogics\BoostSpeed\is-8IENA.tmp в %PROGRAM_FILES%\Auslogics\BoostSpeed\RescueCenter.exe
Сетевая активность:
Подключается к:
- '8c#############099f952f092b952cd.api.deskmetrics.com':443
- 'wp#d':80
- 'pm.###logics.net':80
TCP:
Запросы HTTP GET:
- wp#d/wpad.dat
- pm.###logics.net/api/getNewUID?DA##########
UDP:
- DNS ASK 8c#############099f952f092b952cd.api.deskmetrics.com
- DNS ASK wp#d
- DNS ASK pm.###logics.net
Другое:
Ищет следующие окна:
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
