{"id":3967,"date":"2012-04-09T13:15:59","date_gmt":"2012-04-09T10:15:59","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=3967"},"modified":"2012-04-09T13:15:59","modified_gmt":"2012-04-09T10:15:59","slug":"skymonk","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/download-managers\/skymonk\/skymonk.htm","title":{"rendered":"SkyMonk"},"content":{"rendered":"

\"\"<\/p>\n

SkyMonk<\/h1>\n

This software does not change the Windows boot time.<\/strong><\/p>\n

\"\"<\/a><\/p>\n

SKYMONK.EXE<\/strong>
\nDescription: SkyMonk Client SkyMonk Client 1.75<\/strong>
\nMD5= 1437FD71154B7E6E481B086587B8C684<\/strong>
\nFile is not signed<\/strong>.
\nFile size= 377856<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\*\\SHELL\\SMONKCLI\\COMMAND\\: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE<\/strong> “%1″”
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\SKYMONK CLIENT\\DISPLAYICON: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE<\/strong>”
\nHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\SKYMONK: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE<\/strong> -TRAY”<\/div>\n
GUARDMAILRU.EXE<\/strong>
\nDescription: GuardMailRu Module GuardMailRu Module 1, 0, 0, 317<\/strong>
\nMD5= 998AFA5DD3F294EFEB13A6B75A5B656A<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 1746496<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\GUARD.MAIL.RU.GUI: “”C:\\PROGRAM FILES\\MAIL.RU\\GUARD\\GUARDMAILRU.EXE<\/strong>” \/GUI”
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\GUARD.MAIL.RU\\DISPLAYICON: “”C:\\PROGRAM FILES\\MAIL.RU\\GUARD\\GUARDMAILRU.EXE<\/strong>“”
\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\GUARD.MAIL.RU\\UNINSTALLSTRING: “”C:\\PROGRAM FILES\\MAIL.RU\\GUARD\\GUARDMAILRU.EXE<\/strong>” \/UNINSTALL”
\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\GUARD.MAIL.RU\\IMAGEPATH: “”C:\\PROGRAM FILES\\MAIL.RU\\GUARD\\GUARDMAILRU.EXE<\/strong>“”<\/div>\n
MAILRUSPUTNIK.DLL<\/strong>
\nDescription: MailRuSputnik Module @Mail.Ru MailRuSputnik Module 2, 4, 0, 508<\/strong>
\nMD5= 3BA030992D9AF481025605741C400767<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 1590336<\/strong>
\nRelated registry changes:<\/strong>
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{09900DE8-1DCA-443F-9243-26FF581438AF}\\INPROCSERVER32\\: “C:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\MAILRUSPUTNIK.DLL<\/strong>”
\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{8984B388-A5BB-4DF7-B274-77B879E179DB}\\INPROCSERVER32\\: “C:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\MAILRUSPUTNIK.DLL<\/strong>“<\/div>\n

<\/p>\n

Removed after installation:<\/strong><\/div>\n
IEFRAME.DLL<\/strong>
\nDescription: Internet Explorer Microsoft Corporation Windows\u00ae Internet Explorer 7.00.6000.16757<\/strong>
\nMD5= 9A647EB36A8D4C97A15F46CD560E98E2<\/strong>
\nFile is signed<\/strong> and the signature was verified<\/strong>.
\nFile size= 6066176<\/strong><\/div>\n
Modified during installation:<\/strong><\/div>\n

~+ [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW.MAIL.RU\/CNT\/9514
\n~- [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW.GOOGLE.COM\/<\/p>\n

<\/div>\n

FILES ADDED:25<\/strong><\/p>\n

C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\IMG0.IMGSMAIL.RU\\R\\MY\\IPLAYER_SP2.SWF\\FLASHCOOKIE.SOL
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\#IMG0.IMGSMAIL.RU\\SETTINGS.SOL
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MICROSOFT\\PROTECT\\S-1-5-21-1659004503-1708537768-1801674531-500\\98FABFBE-1D27-4ED6-9FB3-384CB5D30DE6
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\SKYMONK\\CONFIG.INI
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\SKYMONK\\MD5CACHE.INI
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\DESKTOP\\?????? ? ?????????.URL
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\MAIL.RU\\GOMAILRU.ICO
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\DESKTOP\\SKYMONK.LNK
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\FAVORITES\\MAIL.RU ????? – ????????? ??? ???????!.URL
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\FAVORITES\\MAIL.RU.URL
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\SKYMONK CLIENT\\SKYMONK.LNK
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\SKYMONK CLIENT\\UNINSTALL SKYMONK.LNK
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\APPLICATION DATA\\{DCD48218-E972-4D0C-9E5F-43462BC13E3B}\\{9BED5EE2-0547-4706-8600-D3897629ADE0}
\nC:\\PROGRAM FILES\\MAIL.RU\\GUARD\\GUARDMAILRU.EXE<\/strong>
\nC:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\MAILRUSPUTNIK.DLL<\/strong>
\nC:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\MAILRUSPUTNIK_RFRLETITBIT2_S_MPCLN9514.EXE<\/strong>
\nC:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\SPUTNIKFLASHPLAYER.EXE<\/strong>
\nC:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK\\SPUTNIKHELPER.EXE<\/strong>
\nC:\\PROGRAM FILES\\SKYMONK\\ENGLISH.LOC
\nC:\\PROGRAM FILES\\SKYMONK\\FILTER.DLL<\/strong>
\nC:\\PROGRAM FILES\\SKYMONK\\RUSSIAN.LOC
\nC:\\PROGRAM FILES\\SKYMONK\\SKYMONK.DAT
\nC:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE<\/strong>
\nC:\\PROGRAM FILES\\SKYMONK\\UNINSTALL.EXE<\/strong>
\nC:\\PROGRAM FILES\\SKYMONK\\UPDATE.EXE<\/strong><\/div>\n
<\/div>\n

FILES[ATTR]MODIFIED:4<\/strong><\/p>\n

C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\SETTINGS.SOL
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MICROSOFT\\PROTECT\\S-1-5-21-1659004503-1708537768-1801674531-500\\PREFERRED
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\MICROSOFT\\FEEDS CACHE\\INDEX.DAT
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\TEMP\\CE4CF87733651BF1F44DD1E02FC1A8E8<\/div>\n
<\/div>\n

FOLDERS ADDED:13<\/strong><\/p>\n

C:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\IMG0.IMGSMAIL.RU
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\IMG0.IMGSMAIL.RU\\R
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\IMG0.IMGSMAIL.RU\\R\\MY
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\#SHAREDOBJECTS\\DX3TJUNF\\IMG0.IMGSMAIL.RU\\R\\MY\\IPLAYER_SP2.SWF
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\#IMG0.IMGSMAIL.RU
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\APPLICATION DATA\\SKYMONK
\nC:\\DOCUMENTS AND SETTINGS\\ADMINISTRATOR\\LOCAL SETTINGS\\APPLICATION DATA\\MAIL.RU
\nC:\\DOCUMENTS AND SETTINGS\\ALL USERS\\START MENU\\PROGRAMS\\SKYMONK CLIENT
\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\APPLICATION DATA\\{DCD48218-E972-4D0C-9E5F-43462BC13E3B}
\nC:\\PROGRAM FILES\\MAIL.RU
\nC:\\PROGRAM FILES\\MAIL.RU\\GUARD
\nC:\\PROGRAM FILES\\MAIL.RU\\SPUTNIK
\nC:\\PROGRAM FILES\\SKYMONK<\/div>\n
<\/div>","protected":false},"excerpt":{"rendered":"

SkyMonk This software does not change the Windows boot time. SKYMONK.EXE Description: SkyMonk Client SkyMonk Client 1.75 MD5= 1437FD71154B7E6E481B086587B8C684 File is not signed. File size= 377856 Related registry changes: HKLM\\SOFTWARE\\CLASSES\\*\\SHELL\\SMONKCLI\\COMMAND\\: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE “%1″” HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\SKYMONK CLIENT\\DISPLAYICON: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE” HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\SKYMONK: “C:\\PROGRAM FILES\\SKYMONK\\SKYMONK.EXE -TRAY” GUARDMAILRU.EXE Description: GuardMailRu Module GuardMailRu Module 1, 0, 0, 317 MD5= 998AFA5DD3F294EFEB13A6B75A5B656A File is […]
More…<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[2923],"tags":[2927,2930,8412,2935],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/3967"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=3967"}],"version-history":[{"count":0,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/3967\/revisions"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=3967"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=3967"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=3967"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}