Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %WINDIR%\temp\tderuptionplayertemp\microsoft.vc90.crt.manifest
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\computer.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\narrator.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\magnify.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\ease of access.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\command prompt.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\notepad.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\sendto\mail recipient.mapimail
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\sendto\fax recipient.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\sendto\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\control panel.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\sendto\desktop (create shortcut).desklink
- C:\users\tiandysxplayer\appdata\roaming\microsoft\internet explorer\quick launch\window switcher.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\internet explorer\quick launch\shows desktop.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\internet explorer\quick launch\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\windows explorer.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\accessibility\on-screen keyboard.lnk
- C:\users\tiandysxplayer\ntuser.ini
- C:\users\tiandysxplayer\appdata\local\microsoft\windows\usrclass.dat.log1
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\run.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\sendto\compressed (zipped) folder.zfsendtotarget
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\accessories\system tools\private character editor.lnk
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\maintenance\desktop.ini
- C:\users\tiandysxplayer\appdata\roaming\microsoft\windows\start menu\programs\maintenance\help.lnk
- %WINDIR%\temp\tderuptionplayertemp\msvcr90.dll
- %WINDIR%\temp\tderuptionplayertemp\msvcr90d.dll
- %WINDIR%\temp\tderuptionplayertemp\pthreadvc2.dll
- %WINDIR%\temp\tderuptionplayertemp\audiodecv33.dll
- %WINDIR%\temp\tderuptionplayertemp\avshow.dll
- %WINDIR%\temp\tderuptionplayertemp\charres.dll
- %WINDIR%\temp\tderuptionplayertemp\json.dll
- %WINDIR%\temp\tderuptionplayertemp\libcurl.dll
- %WINDIR%\temp\tderuptionplayertemp\playsdkm4.dll
- %WINDIR%\temp\tderuptionplayertemp\spdecv33.dll
- %WINDIR%\temp\tderuptionplayertemp\microsoft.vc90.debugcrt.manifest
- %WINDIR%\temp\tderuptionplayertemp\videodecv33.dll
- %WINDIR%\temp\tderuptionplayertemp\nvssdk.dll
- %WINDIR%\temp\tderuptionplayertemp\logconfig.ini
- %WINDIR%\temp\tderuptionplayertemp\device.ini
- %WINDIR%\temp\tderuptionplayertemp\nvsieconfig.ini
- %WINDIR%\temp\tderuptionplayertemp\tdaxoffice.ocx
- %WINDIR%\temp\tderuptionplayertemp\tdhook.dll
- %WINDIR%\temp\tderuptionplayertemp\tdaxcontrol.ocx
- %WINDIR%\temp\tderuptionplayertemp\swallow.ocx
- %WINDIR%\temp\tderuptionplayertemp\tdofficeword.exe
- C:\users\tiandysxplayer\ntuser.dat
- %WINDIR%\temp\tderuptionplayertemp\netadmin.dll
- C:\users\tiandysxplayer\appdata\local\microsoft\windows\usrclass.dat
- C:\users\tiandysxplayer\ntuser.dat.log1
Присваивает атрибут 'скрытый' для следующих файлов
- C:\users\tiandysxplayer\ntuser.dat
- C:\users\tiandysxplayer\appdata\local\microsoft\windows\usrclass.dat
Удаляет следующие файлы
- %WINDIR%\syswow64\xvidcore.dll
- %WINDIR%\temp\tderuptionplayertemp\tdhook.dll
Подменяет следующие файлы
- %WINDIR%\temp\tderuptionplayertemp\tdhook.dll
Другое
Создает и запускает на исполнение
- '%WINDIR%\temp\tderuptionplayertemp\tdofficeword.exe' 0 0 474 296 0 TiandySXPlayer
