Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %HOMEPATH%\cookies\user@baidu[1].txt
Сетевая активность
Подключается к
- 'pu##.###nzhang.baidu.com':80
- 'ba##u.com':80
- 'js.##ers.51.la':443
TCP
Запросы HTTP GET
- http://gu########5-com.litedownloadseek.cn/css/style.css
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_fc1c71360daf47a29dee7e2c613b1403.png
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_a672a8433b964f019abfe1704adbb6d5.png
- http://gu########5-com.litedownloadseek.cn/css/zsy.css
- http://gu########5-com.litedownloadseek.cn/css/common.css
- http://bi##.huaxia.com/huaxiaimages/zz/5.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/39.jpg
- http://bi##.###edownloadseek.cn/gate/big5/stat.huaxia.com/count/MyStat.jsp?ai###########################
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_b8e678b2af284ef588de800c851ad718.jpg
- http://bi##.huaxia.com/images/commentImages/end_n_input_bg2.gif
- http://gu########5-com.litedownloadseek.cn/images/point.gif
- http://gu########5-com.litedownloadseek.cn/images/home.png
- http://bi##.###edownloadseek.cn/tj.js
- http://gu########5-com.litedownloadseek.cn/images/wx.jpg
- http://gu########5-com.litedownloadseek.cn/images/tel.png
- http://n.###aimg.cn/news/1_img/upload/2b0c102b/320/w640h480/20180521/Ig9s-haturft5360246.jpg
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_7af40a1f7d4849c18b04229e6cd76ff2.png
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_89b30797e947446abc47f4d516a913ac.png
- http://bi##.huaxia.com/huaxiaimages/zz/9.jpg
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_4dc399f580ab418ca5d382e9dc9657cf.png
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_aa4ccf3234e6404abf5eb6ebcd7dca46.png
- http://bi##.huaxia.com/huaxiaimages/zz/32.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/35.jpg
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_d8d10f1b23394849aac918ecba0b2019.png
- http://bi##.huaxia.com/huaxiaimages/lb/45.jpg
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_6e242bb8093d4bdd83c3ec692595f6bb.jpg
- http://i0.##exun.net/i/DealersShop/Uploads/2019/7/dealer_default_07daa1d7304a48e39bf91a78753cd6c0.png
- http://www.ci##2.com/was/images/874675.jpg
- http://www.ci##2.com/css/img/i17.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/2.jpg
- http://bi##.huaxia.com/huaxiaimages/zz/1.jpg
- http://gu########5-com.litedownloadseek.cn/css/showmsg.css
- http://pu##.###nzhang.baidu.com/push.js
- http://gu########5-com.litedownloadseek.cn/images/mail.png
UDP
- DNS ASK gu########5-com.litedownloadseek.cn
- DNS ASK bi##.huaxia.com
- DNS ASK ci##2.com
- DNS ASK i0.##exun.net
- DNS ASK n.###aimg.cn
- DNS ASK bi##.###edownloadseek.cn
- DNS ASK pu##.###nzhang.baidu.com
- DNS ASK ap#.##are.baidu.com
- DNS ASK ba##u.com
- DNS ASK js.##ers.51.la
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
