Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ADPlayLink' = '%APPDATA%\adplaylink\aplink.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -Embedding
- '%APPDATA%\adplaylink\aplink.exe'
- '%APPDATA%\adplaylink\aplinkup.exe' in
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\aplmp02[1].xml
- %APPDATA%\adplaylink\uninst.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\adplaylink[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\adplaylink_set2[1].xml
- %APPDATA%\adplaylink\aplinkup.exe
- %APPDATA%\adplaylink\aplink.exe
- %TEMP%\nss2.tmp\System.dll
- %APPDATA%\adplaylink\mopenpop.dll
- %TEMP%\nss2.tmp\System.dll
- 'localhost':1044
- 'ad###ylink.com':80
- 'do##.#dplaylink.com':80
- 'lo#.##skeyword.com':80
- 'www.mi####penpop.com':80
- http://do##.#dplaylink.com/con/adplaylink_set2.xml
- http://ad###ylink.com/
- http://www.mi####penpop.com/xml/aplmp02.xml
- http://lo#.##skeyword.com/?a=##################################
- http://lo#.##skeyword.com/?a=###############################
- DNS ASK do##.#dplaylink.com
- DNS ASK ad###ylink.com
- DNS ASK lo#.##skeyword.com
- DNS ASK www.mi####penpop.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: ''