Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sxx
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\player.cntv.cn\cntvplayeroptions.sxx
Удаляет следующие файлы
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sol
- %APPDATA%\macromedia\flash player\#sharedobjects\gr8by44n\player.cntv.cn\cntvplayeroptions.sxx
Перемещает следующие файлы
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sxx в %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sol
Подменяет следующие файлы
- %APPDATA%\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sxx
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#player.cntv.cn\settings.sol
Сетевая активность
TCP
Запросы HTTP GET
- http://bi##.huaxia.com/huaxiaimages/zz/1.jpg
- http://fp######ad2.macromedia.com/get/flashplayer/update/current/install/version.xml19.0.0.207~installVector=2&lang=en&cpuWordLength=64&playerType=ax&os=win&osVer=13
- http://im#.#j003.com/pub_soft/29945/4203_14.jpg
- http://im#.#j003.com/pub_soft/29945/4203_19.jpg
- http://im#.#j003.com/pub_soft/29945/4203_12.jpg
- http://im#.#j003.com/pub_soft/29945/4203_26.jpg
- http://im#.#j003.com/pub_soft/29945/4203_20.jpg
- http://bi##.###edownloadseek.cn/tj.js
- http://pu##.###nzhang.baidu.com/push.js
- http://im#.#j003.com/pub_soft/29945/4203_28.jpg
- http://bi##.###edownloadseek.cn/common.js
- http://js.###yer.cntv.cn/crossdomain.xml
- http://js.###yer.cntv.cn/xml/config/outside.xml
- http://js.###yer.cntv.cn/xml/config/outside.xml?t=##################
- http://vd#.####.##tv.cn.litedownloadseek.cn/crossdomain.xml
- http://cs###.#####ai.com.litedownloadseek.cn/css/start/jquery-ui-1.8.5.custom.css
- http://pl####.###v.cn.litedownloadseek.cn/crossdomain.xml
- http://pl####.###v.cn.litedownloadseek.cn/widgets/wg/WidgetButton20150514.swf?t=##################
- http://cs###.#####ai.com.litedownloadseek.cn/css/seller.css?v=########
- http://cs###.#####ai.com.litedownloadseek.cn/css/topnew2.css?v=########
- http://pl###r.cntv.cn/standard/cntvplayerQC20181126.swf?v=###################
- http://bi##.huaxia.com/images/commentImages/end_n_input_bg2.gif
- http://bi##.huaxia.com/huaxiaimages/zz/5.jpg
- http://www.ha######.#om.cn.litedownloadseek.cn/extra/css/uniform.css
- http://im#.959.cn/7/2019/0719/20190719014422430.jpg
- http://im#.959.cn/7/2019/0719/20190719014422484.jpg
- http://im#.#j003.com/pub_soft/29945/4203_5.jpg
- http://im#.#j003.com/pub_soft/29945/4203_11.jpg
- http://www.ba##ou5.net/source/img/lingquan.jpg
- http://www.ba##ou5.net/mqlzq-erweima.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/35.jpg
- http://www.ha######.#om.cn.litedownloadseek.cn/extra/css/nav/nav_gray.css
- http://bi##.huaxia.com/huaxiaimages/zz/9.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/2.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/32.jpg
- http://im#.959.cn/7/2019/0719/20190719014422364.png
- http://im#.#j003.com/pub_soft/29945/4203_36.jpg
- http://im#.#j003.com/pub_soft/29945/4203_22.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/39.jpg
- http://bi##.huaxia.com/huaxiaimages/lb/45.jpg
- http://bi##.###edownloadseek.cn/gate/big5/stat.huaxia.com/count/MyStat.jsp?ai###########################
- http://www.ha###hou.com.cn/images/07hzwindle_0205newsearchbt.gif
- http://pl####.###v.cn.litedownloadseek.cn/widgets/NoDataVideoPanel.swf?t=#################
- http://oc##.#odaddy.com//MEQwQjBAMD4wPDAJBgUrDgMCGgUABBTkIInKBAzXkF0Qh0pel3lfHJ9GPAQU0sSw0pHUTBFxs2HLPaH%2B3ahq1OMCAxvnFQ%3D%3D
UDP
- DNS ASK ha######.#om.cn.litedownloadseek.cn
- DNS ASK js.##ers.51.la
- DNS ASK vd#.####.##tv.cn.litedownloadseek.cn
- DNS ASK js.###yer.cntv.cn
- DNS ASK cs###.#####ai.com.litedownloadseek.cn
- DNS ASK ap#.##are.baidu.com
- DNS ASK fp######ad2.macromedia.com
- DNS ASK pl####.###v.cn.litedownloadseek.cn
- DNS ASK pu##.###nzhang.baidu.com
- DNS ASK bi##.###edownloadseek.cn
- DNS ASK ha###hou.com.cn
- DNS ASK ba##ou5.net
- DNS ASK im#.#j003.com
- DNS ASK im#.959.cn
- DNS ASK bi##.huaxia.com
- DNS ASK pl###r.cntv.cn
- DNS ASK oc##.#odaddy.com
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
