Trojan.DownLoader12.854

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Classes\youxunapk\Shell\OPEN\Command] '' = '"%PROGRAM_FILES%\YouXunBox\shoujizhushou.exe" "%1"'

Вредоносные функции:

Создает и запускает на исполнение:

'%PROGRAM_FILES%\YouXunBox\shoujizhushou.exe' -gginstall -slient
'%PROGRAM_FILES%\YouXunBox\Youxun.exe' -h

Запускает на исполнение:

'<SYSTEM32>\wbem\wmiadap.exe' /R /T

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\YouXunBox\skins\Common\message.png
%PROGRAM_FILES%\YouXunBox\skins\Common\min2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\megtip.png
%PROGRAM_FILES%\YouXunBox\skins\Common\meok.png
%PROGRAM_FILES%\YouXunBox\skins\Common\morebg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mydeclare.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mydelete.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mtitle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mycover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\icon_delete.png
%PROGRAM_FILES%\YouXunBox\skins\Common\igame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gamecover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gametag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\left_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\main.ico
%PROGRAM_FILES%\YouXunBox\skins\Common\mecancle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\loading.png
%PROGRAM_FILES%\YouXunBox\skins\Common\logo.png
%PROGRAM_FILES%\YouXunBox\skins\Common\progressBK.png
%PROGRAM_FILES%\YouXunBox\skins\Common\protype.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ok.png
%PROGRAM_FILES%\YouXunBox\skins\Common\progress.png
%PROGRAM_FILES%\YouXunBox\skins\Common\radio.png
%PROGRAM_FILES%\YouXunBox\skins\Common\search_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\seting.png
%PROGRAM_FILES%\YouXunBox\skins\Common\refresh.png
%PROGRAM_FILES%\YouXunBox\skins\Common\search.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mypage.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mypostion.png
%PROGRAM_FILES%\YouXunBox\skins\Common\myleft.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mymore.png
%PROGRAM_FILES%\YouXunBox\skins\Common\myright.png
%PROGRAM_FILES%\YouXunBox\skins\Common\net.png
%PROGRAM_FILES%\YouXunBox\skins\Common\newtag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\nav_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\nav_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\customers.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ddele.png
%PROGRAM_FILES%\YouXunBox\skins\Common\close.png
%PROGRAM_FILES%\YouXunBox\skins\Common\close_tag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\defaultico.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\animate.png
%PROGRAM_FILES%\YouXunBox\skins\Common\back.png
%PROGRAM_FILES%\YouXunBox\skins\Common\allgame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\allgame_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\back_pl.png
%PROGRAM_FILES%\YouXunBox\skins\Common\capaciity.png
%PROGRAM_FILES%\YouXunBox\skins\Common\checkbox.png
%PROGRAM_FILES%\YouXunBox\skins\Common\big.png
%PROGRAM_FILES%\YouXunBox\skins\Common\bottom_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dstar.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dstop.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\game_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gameback.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dlprior.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dopen.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dl_menu_gray.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dl_menu_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\down-btb.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downstu.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downtab.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downbk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downing.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\ok_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\problem.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\loading_t.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\nosj.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\qd_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\ts_close.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\usb_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\sjok.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\sju_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\help-btb.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\img_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fsbox_loading.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fsbox_yy.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\impro_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\k_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\k_set.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\install_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\jcsj_bg.png
%PROGRAM_FILES%\YouXunBox\我的游戏.lnk
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\我的游戏.lnk
%PROGRAM_FILES%\YouXunBox\Config.ini
%PROGRAM_FILES%\YouXunBox\uninst.exe
%HOMEPATH%\Desktop\游迅游戏盒.lnk
%HOMEPATH%\.android\adbkey
%TEMP%\adb.log
%PROGRAM_FILES%\YouXunBox\Log.txt
%HOMEPATH%\.android\adbkey.pub
%PROGRAM_FILES%\YouXunBox\skins\assistant\yxsjb_derror.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\back.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\v_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\yxsjb_aerror.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_ime.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\screen.png
%PROGRAM_FILES%\YouXunBox\xldl.dll
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\nav_bg.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\qp_sq.png
%PROGRAM_FILES%\YouXunBox\skins\Common\startgame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\starbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\start.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tag_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tray_menu_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tagbk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tray_menu.png
%PROGRAM_FILES%\YouXunBox\skins\Common\share.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\settab.png
%PROGRAM_FILES%\YouXunBox\skins\Common\shadow.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\small.png
%PROGRAM_FILES%\YouXunBox\skins\Common\star.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error_sq.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\cs_install.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\dklj.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error_tb.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_succes.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_ts_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\errordown.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox_close.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\a1_img.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\a1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\aclose.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morefn_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morepx_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\more_tb.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morepx_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\opa75.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\page_button_bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\no_img.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\no_img_m.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview_Rbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\jp_ts.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview_Lbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\left_nav_bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\list_tjbg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\loader.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\left_nav_pl.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\list_newbg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\box2.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\downSlides.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\index.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\item.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\jquery.1.9.1.min.js
%PROGRAM_FILES%\YouXunBox\Cache\check.html
%PROGRAM_FILES%\YouXunBox\Cache\css\gamestart_con.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\jquery.ba-resize.min.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\lightbox.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\pfsussce.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ph_mub.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\page_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\pageboxdowntitle.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\star.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\title_bom_bg_a.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\zz_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\start.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\title_bom_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_next.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_prev.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\jscrollpane.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\120x170.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_scroll_back.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\adbg_close.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\box_fImg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_scroll_forward.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\adbag.png
%PROGRAM_FILES%\YouXunBox\Cache\apk\AdbWinUsbApi.dll
%PROGRAM_FILES%\YouXunBox\Cache\apk\aapt.exe
%PROGRAM_FILES%\main.zip
%PROGRAM_FILES%\YouXunBox\Cache\apk\AdbWinApi.dll
%PROGRAM_FILES%\YouXunBox\Cache\apk\adb.exe
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\downpage.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\item.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\config.ini
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\box.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gl_dbtn.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg_pl_a.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg_pl_b.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gl_dbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgnext_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgprev_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imagezz.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgbtn.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\downImg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_page_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\boxitem_Img.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\boxitem_Img.psd
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_rank_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\game_pxbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_rank_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\error.png
%PROGRAM_FILES%\YouXunBox\MyGame.ico
%PROGRAM_FILES%\YouXunBox\Youxun.exe
%PROGRAM_FILES%\YouXunBox\yxpcgame.exe
%PROGRAM_FILES%\YouXunBox\Data\allgameleft.json
%PROGRAM_FILES%\YouXunBox\download\MiniThunderPlatform.exe
%PROGRAM_FILES%\YouXunBox\download\XLCrypto.dll
%PROGRAM_FILES%\YouXunBox\download\atl71.dll
%PROGRAM_FILES%\YouXunBox\download\XLBugHandler.dll
%PROGRAM_FILES%\YouXunBox\download\XLBugReport.exe
%PROGRAM_FILES%\YouXunBox\Cache\js\get_con.js
%PROGRAM_FILES%\YouXunBox\Cache\js\jquery.1.9.1.min.js
%PROGRAM_FILES%\YouXunBox\Cache\images\win-64.png
%PROGRAM_FILES%\YouXunBox\Cache\images\zzpz.gif
%PROGRAM_FILES%\YouXunBox\Cache\js\pztc_con.js
%PROGRAM_FILES%\YouXunBox\Cache\share.html
%PROGRAM_FILES%\YouXunBox\Cache\tc.css
%PROGRAM_FILES%\YouXunBox\Cache\loading.html
%PROGRAM_FILES%\YouXunBox\Cache\loading_con.html
%PROGRAM_FILES%\YouXunBox\yxphonegame.exe
%PROGRAM_FILES%\YouXunBox\skins\Common\Cancle.png
%PROGRAM_FILES%\YouXunBox\msvcr71.dll
%PROGRAM_FILES%\YouXunBox\shoujizhushou.exe
%PROGRAM_FILES%\YouXunBox\skins\Common\Close2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\Option_main.png
%PROGRAM_FILES%\YouXunBox\skins\Common\SetTitle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\EditBorder.png
%PROGRAM_FILES%\YouXunBox\skins\Common\FilePath.png
%PROGRAM_FILES%\YouXunBox\download\download_engine.dll
%PROGRAM_FILES%\YouXunBox\download\id.dat
%PROGRAM_FILES%\YouXunBox\download\dl_lib.dll
%PROGRAM_FILES%\YouXunBox\download\dl_peer_id.dll
%PROGRAM_FILES%\YouXunBox\download\minizip.dll
%PROGRAM_FILES%\YouXunBox\download\zlib1.dll
%PROGRAM_FILES%\YouXunBox\msvcp71.dll
%PROGRAM_FILES%\YouXunBox\download\msvcp71.dll
%PROGRAM_FILES%\YouXunBox\download\msvcr71.dll
%PROGRAM_FILES%\YouXunBox\Cache\images\left_comment.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_comment_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\images\jt-ts.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\khd-pzImg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_tool.png
%PROGRAM_FILES%\YouXunBox\Cache\images\loading_text.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\pl2.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_tool_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\images\loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\bottompz-bg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\ck_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\css\peizi.css
%PROGRAM_FILES%\YouXunBox\Cache\images\bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\images\close-btn.png
%PROGRAM_FILES%\YouXunBox\Cache\images\gamestartImg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\img_loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\fx-btn.png
%PROGRAM_FILES%\YouXunBox\Cache\images\fxcg_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-ati.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-intel.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pzwin_close.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-amd.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-nvidia.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-winxp.png
%PROGRAM_FILES%\YouXunBox\Cache\images\win-32.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-vista.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-win7.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-ok.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-right.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-error.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-noinfo.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-bg-img.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-tc-pl.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pzdf-pl.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-df.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-jiao.png

Удаляет следующие файлы:

<SYSTEM32>\PerfStringBackup.TMP
<SYSTEM32>\wbem\Performance\WmiApRpl.ini
%PROGRAM_FILES%\main.zip

Сетевая активность:

Подключается к:

'localhost':5593
'localhost':5591
'localhost':5597
'localhost':5595
'localhost':5589
'localhost':5583
'localhost':5581
'localhost':5587
'localhost':5585
'localhost':5611
'localhost':5609
'localhost':5615
'localhost':5613
'localhost':5607
'localhost':5601
'localhost':5599
'localhost':5605
'localhost':5603
'localhost':5557
'ad#.#xdown.com':80
'localhost':5561
'localhost':5559
'localhost':5555
'bo###.yxdown.com':80
'to####.box.yxdown.com':80
'localhost':5037
'ap#.##x.yxdown.com':80
'localhost':5575
'localhost':5573
'localhost':5579
'localhost':5577
'localhost':5571
'localhost':5565
'localhost':5563
'localhost':5569
'localhost':5567

TCP:

Запросы HTTP GET:

ap#.##x.yxdown.com/open/group/data.json?ke###########################################################################################################################################################################################################################################################################
ad#.#xdown.com/ad.ashx/shualiang.js
bo###.yxdown.com/shoujizhushou/setting.json
to####.box.yxdown.com/do?fr###################################################################
bo###.yxdown.com/Install/ads.ini
bo###.yxdown.com/yxh/setting.json

UDP:

DNS ASK ap#.##x.yxdown.com
DNS ASK ad#.#xdown.com
DNS ASK to####.box.yxdown.com
DNS ASK bo###.yxdown.com

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней