Техническая информация
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4657.exe /s
- <Текущая директория>\KINSTALLERS_66_4657.exe
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4657.exe (загружен из сети Интернет)
- ClassName: '' WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: '' WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'RegmonClass' WindowName: ''
- ClassName: '' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'FilemonClass' WindowName: ''
- ClassName: 'pediy06' WindowName: ''
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4657.exe.tmp
- C:\mcq.ini
- <Текущая директория>\KINSTALLERS_66_4657.exe
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4657.exe.tmp в %TEMP%\kingsoftkonline\KINSTALLERS_66_4657.exe
- 'cd###.www.duba.net':80
- 'bo.###a.net:8080':80
- 'fa###.so88.org':80
- cd###.www.duba.net/duba/install/2011/ever/akavsetups_66_0.exe
- bo.###a.net:8080/pagetracer2/duba/__utm.gif?01#####################################################################################################################
- fa###.so88.org/mcq/yz.txt
- DNS ASK cd###.www.duba.net
- DNS ASK bo.###a.net:8080
- DNS ASK fa###.so88.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '18467-41' WindowName: ''