Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hbpassport' = '%PROGRAM_FILES%\HBClient\hbast.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hdp' = '%PROGRAM_FILES%\Henbang Applications\HDP\Henbang.exe'
- %PROGRAM_FILES%\HBClient\hbast.exe
- %PROGRAM_FILES%\Henbang Applications\HDP\HENBANG.EXE
- %TEMP%\GLJ2.tmp %PROGRAM_FILES%\HBClient\hapast.dll
- %TEMP%\GLJ2.tmp %PROGRAM_FILES%\HBClient\hunt.dll
- %TEMP%\GLJ2.tmp %PROGRAM_FILES%\HBClient\hbast.dll
- <SYSTEM32>\rundll32.exe "%WINDIR%\hunt.dll",RunUpdate 131326;1.1.0;hbast.dll
- <SYSTEM32>\rundll32.exe "%PROGRAM_FILES%\HBClient\hbast.dll",StartHAP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0039.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003a.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0038.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0036.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0037.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003e.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\NavBar\~GLH003f.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003d.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003b.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003c.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0035.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002e.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002f.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002d.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH002b.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002c.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0033.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0034.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0032.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0030.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0031.TMP
- %HOMEPATH%\Start Menu\Programs\єЬ°фИнјю\єЬ°фРЎГШКй\Р¶ФШєЬ°фРЎГШКй.lnk
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\Channel_0.xml
- %WINDIR%\henbang.INI
- <SYSTEM32>\hbcf.ini
- <SYSTEM32>\hdpconfig.ini
- <SYSTEM32>\hbhap.dll
- <SYSTEM32>\hbu.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\hbhap[1].dll
- %WINDIR%\hunt.dll
- %PROGRAM_FILES%\HBClient\udp.log
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\CONFIG.XML
- <SYSTEM32>\hsy.ini
- %WINDIR%\hburl.ini
- %ALLUSERSPROFILE%\Start Menu\Programs\єЬ°фИнјю\єЬ°фРЎГШКй\єЬ°фРЎГШКй.lnk
- %HOMEPATH%\Start Menu\Programs\єЬ°фИнјю\єЬ°фРЎГШКй\readme.lnk
- %HOMEPATH%\Start Menu\Programs\єЬ°фИнјю\єЬ°фРЎГШКй\єЬ°фРЎГШКй.lnk
- %PROGRAM_FILES%\Henbang Applications\HDP\HbHdp.LOG
- %PROGRAM_FILES%\Henbang Applications\HDP\hdp.log
- %PROGRAM_FILES%\HBClient\hbast.log
- %PROGRAM_FILES%\HBClient\hap.log
- %HOMEPATH%\Desktop\єЬ°фРЎГШКй.lnk
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH002a.TMP
- <SYSTEM32>\~GLH000d.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\~GLH000e.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH000c.TMP
- %PROGRAM_FILES%\HBClient\~GLH0008.TMP
- %PROGRAM_FILES%\HBClient\~GLH000a.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0012.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0013.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0011.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\~GLH000f.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0010.TMP
- %PROGRAM_FILES%\HBClient\~GLH0006.TMP
- %TEMP%\GLG5.tmp
- %TEMP%\~GLH0000.TMP
- %TEMP%\GLK3.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\GLJ2.tmp
- %PROGRAM_FILES%\HBClient\temp.000
- <SYSTEM32>\~GLH0005.TMP
- %PROGRAM_FILES%\HBClient\~GLH0003.TMP
- %TEMP%\hdp\~GLH0001.TMP
- <SYSTEM32>\~GLH0002.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0014.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0023.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0024.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0022.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0020.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0021.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0028.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0029.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0027.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0025.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0026.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001f.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0018.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0019.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0017.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0015.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0016.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001d.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001e.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001c.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001a.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001b.TMP
- %TEMP%\GLK3.tmp
- %PROGRAM_FILES%\Henbang Applications\HDP\hdp.log
- %TEMP%\GLJ2.tmp
- %TEMP%\GLC1.tmp
- %TEMP%\GLF6.tmp
- %TEMP%\GLG5.tmp
- %PROGRAM_FILES%\HBClient\~GLH0006.TMP
- %PROGRAM_FILES%\HBClient\~GLH0003.TMP
- %PROGRAM_FILES%\HBClient\~GLH0008.TMP
- <SYSTEM32>\his.ini
- %PROGRAM_FILES%\HBClient\~GLH000a.TMP
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH002b.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\UrlList02.xsl
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002c.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\0_DELETE.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0029.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\Passports.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH002a.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\SearchEngines.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002f.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\CLOSE_HOVER.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0030.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\CLOSE_NORMAL.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002d.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\ARROW.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH002e.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\ARROW_UP.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0023.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\CONFIG.XML
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0024.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\FreeInfo.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0021.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\Channel_Common.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0022.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\CHANNEL_DEFAULT.XML
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0027.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\MySites.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0028.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\MyTools.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0025.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\HotWords.xml
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0026.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\HotWords.xsl
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003b.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\TAB_HOVER.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003c.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\TAB_NORMAL.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0039.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\PLUS.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003a.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\SEARCH.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\NavBar\~GLH003f.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\NavBar\Henbang.gif
- <SYSTEM32>\hsy.ini в <SYSTEM32>\his.ini
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003d.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\TITLE_BG.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH003e.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\TOP_BG.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0033.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\ITEM.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0034.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\MANAGER.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0031.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\DROPDOWN.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0032.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\HENBANG.ICO
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0037.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\OPEN_NORMAL.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0038.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\Page.gif
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0035.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\MINUS.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0036.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\OPEN_HOVER.GIF
- %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\~GLH0020.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\_DATA\Channel_0.xml
- %PROGRAM_FILES%\HBClient\temp.000 в %PROGRAM_FILES%\HBClient\~GLH000b.TMP
- %PROGRAM_FILES%\HBClient\~GLH000b.TMP в %PROGRAM_FILES%\HBClient\hapast.dll
- %PROGRAM_FILES%\HBClient\temp.000 в %PROGRAM_FILES%\HBClient\~GLH0009.TMP
- %PROGRAM_FILES%\HBClient\~GLH0009.TMP в %PROGRAM_FILES%\HBClient\hbast.dll
- %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\~GLH000e.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\HEADER.JS
- %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\~GLH000f.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Scripts\FOOTER.JS
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH000c.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\UNWISE.EXE
- <SYSTEM32>\~GLH000d.TMP в <SYSTEM32>\hdpconfig.ini
- <SYSTEM32>\~GLH0002.TMP в <SYSTEM32>\hbu.ini
- %PROGRAM_FILES%\HBClient\temp.000 в %PROGRAM_FILES%\HBClient\~GLH0004.TMP
- %TEMP%\~GLH0000.TMP в %TEMP%\GLF6.tmp
- %TEMP%\hdp\~GLH0001.TMP в %TEMP%\hdp\adoc.txt
- %PROGRAM_FILES%\HBClient\temp.000 в %PROGRAM_FILES%\HBClient\~GLH0007.TMP
- %PROGRAM_FILES%\HBClient\~GLH0007.TMP в %PROGRAM_FILES%\HBClient\hbast.exe
- %PROGRAM_FILES%\HBClient\~GLH0004.TMP в %PROGRAM_FILES%\HBClient\hunt.dll
- <SYSTEM32>\~GLH0005.TMP в <SYSTEM32>\hbcf.ini
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001a.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stMyHomePage.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001b.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stMySites.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0018.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\README.TXT
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0019.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stMyFreeArea.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001e.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stSearchEngines.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001f.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\STYLE.CSS
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001c.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stMyTools.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH001d.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\stPassport.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0012.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\HENBANG.EXE
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0013.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\myDirectMail.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\Images\~GLH0010.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\Images\AboutHDP.jpg
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0011.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\DEFAULT.HTA
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0016.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\mySites.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0017.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\myTools.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0014.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\myFreeArea.htm
- %PROGRAM_FILES%\Henbang Applications\HDP\~GLH0015.TMP в %PROGRAM_FILES%\Henbang Applications\HDP\myHomePage.htm
- 'cl##.#enbang.net':80
- 'do#####d.henbang.net':80
- 'localhost':1035
- do#####d.henbang.net/services/services.aspx?Di#################################################################################################################
- do#####d.henbang.net/download/updatelist/hbhap.dll
- DNS ASK cl##.#enbang.net
- DNS ASK do#####d.henbang.net
- ClassName: '' WindowName: 'HenbangUpdate'
- ClassName: '' WindowName: 'Henbang AD UpdateVersion - Microsoft Internet Explorer'
- ClassName: 'henbangupdate' WindowName: 'henbang update assistant'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'henbangframe' WindowName: 'henbang search assistant'