Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\$inst\2.tmp
- C:\program files (x86)internet download manager\languages\tips_fa.txt
- C:\program files (x86)internet download manager\languages\tips_es.txt
- C:\program files (x86)internet download manager\languages\tips_de.txt
- C:\program files (x86)internet download manager\languages\tips_ar.txt
- C:\program files (x86)internet download manager\languages\template.lng
- C:\program files (x86)internet download manager\languages\idm_tr.lng
- C:\program files (x86)internet download manager\languages\idm_th.lng
- C:\program files (x86)internet download manager\languages\idm_ru.lng
- C:\program files (x86)internet download manager\languages\idm_ptbr.lng
- C:\program files (x86)internet download manager\languages\idm_pl.lng
- C:\program files (x86)internet download manager\languages\idm_nl.lng
- C:\program files (x86)internet download manager\languages\idm_it.lng
- C:\program files (x86)internet download manager\languages\idm_fr.lng
- C:\program files (x86)internet download manager\languages\idm_fa.lng
- C:\program files (x86)internet download manager\languages\idm_es.lng
- C:\program files (x86)internet download manager\languages\idm_de.lng
- C:\program files (x86)internet download manager\languages\idm_ar.lng
- C:\program files (x86)internet download manager\iegetvl2.htm
- C:\program files (x86)internet download manager\iemonitor.exe
- C:\program files (x86)internet download manager\languages\tips_fr.txt
- C:\program files (x86)internet download manager\languages\tips_it.txt
- %HOMEPATH%\desktop\internet download manager.lnk
- C:\program files (x86)internet download manager\uninstall.exe
- C:\program files (x86)internet download manager\tutor.chm
- C:\program files (x86)internet download manager\toolbar\3d_style_3.tbi
- C:\program files (x86)internet download manager\toolbar\3d_small_3.bmp
- C:\program files (x86)internet download manager\toolbar\3d_smallhot_3.bmp
- C:\program files (x86)internet download manager\toolbar\3d_large_3.bmp
- C:\program files (x86)internet download manager\toolbar\3d_largehot_3.bmp
- C:\program files (x86)internet download manager\setup_error.log
- C:\program files (x86)internet download manager\idmshellext.dll
- C:\program files (x86)internet download manager\scheduler.chm
- C:\program files (x86)internet download manager\license.txt
- C:\program files (x86)internet download manager\languages\tips_tr.txt
- C:\program files (x86)internet download manager\languages\tips_th.txt
- C:\program files (x86)internet download manager\languages\tips_ru.txt
- C:\program files (x86)internet download manager\languages\tips_ptbr.txt
- C:\program files (x86)internet download manager\languages\tips_pl.txt
- C:\program files (x86)internet download manager\languages\tips_nl.txt
- C:\program files (x86)internet download manager\iegetvl.htm
- C:\program files (x86)internet download manager\iegetall.htm
- C:\program files (x86)internet download manager\ieext.htm
- C:\program files (x86)internet download manager\idmftype.dat
- C:\program files (x86)internet download manager\idmfsa.dll
- C:\program files (x86)internet download manager\idmcchandler64.dll
- C:\program files (x86)internet download manager\idmcchandler.dll
- C:\program files (x86)internet download manager\idmbrbtn64.dll
- C:\program files (x86)internet download manager\idmbrbtn.dll
- C:\program files (x86)internet download manager\idmantypeinfo.tlb
- C:\program files (x86)internet download manager\idman.exe
- C:\program files (x86)internet download manager\idman.chm
- C:\program files (x86)internet download manager\grabber.chm
- C:\program files (x86)internet download manager\downlwithidm64.dll
- C:\program files (x86)internet download manager\downlwithidm.dll
- C:\program files (x86)internet download manager\defexclist.txt
- C:\program files (x86)internet download manager\d-cache\part1\output-info.ini
- C:\program files (x86)internet download manager\d-cache\cacheindex.txt
- %TEMP%\$inst\temp_0.tmp
- C:\program files (x86)internet download manager\idmftype64.dll
- C:\program files (x86)internet download manager\idmgetall.dll
- C:\program files (x86)internet download manager\idmftype.dll
- C:\program files (x86)internet download manager\idmgetall64.dll
- C:\program files (x86)internet download manager\idmwfp64.sys
- C:\program files (x86)internet download manager\idmgrhlp.exe
- C:\program files (x86)internet download manager\idmwfp32.sys
- C:\program files (x86)internet download manager\idmwfp.inf
- C:\program files (x86)internet download manager\idmwfp.cat
- C:\program files (x86)internet download manager\idmtdi64.sys
- C:\program files (x86)internet download manager\idmtdi32.sys
- C:\program files (x86)internet download manager\idmtdi.inf
- C:\program files (x86)internet download manager\idmtdi.cat
- C:\program files (x86)internet download manager\tips.txt
- %APPDATA%\idm\defextmap.dat
- C:\program files (x86)internet download manager\idmsetup2.log
- C:\program files (x86)internet download manager\idmnetmon64.dll
- C:\program files (x86)internet download manager\idmnetmon.dll
- C:\program files (x86)internet download manager\idmmzcc.xpi
- C:\program files (x86)internet download manager\idmmkb.dll
- C:\program files (x86)internet download manager\idmintegrator64.exe
- C:\program files (x86)internet download manager\idmiecc64.dll
- C:\program files (x86)internet download manager\idmiecc.dll
- C:\program files (x86)internet download manager\idmshellext64.dll
- %APPDATA%\idm\urlexclist.dat
Удаляет следующие файлы
- <DRIVERS>\etc\hosts
- %TEMP%\$inst\temp_0.tmp
Подменяет файл HOSTS.
Сетевая активность
TCP
Запросы HTTP GET
- http://www.tr##dnt.net/vb/u63400/
UDP
- DNS ASK tr##dnt.net
- DNS ASK hc###cha.com
- DNS ASK as####.hcaptcha.com
- DNS ASK cd#.#avenjs.com
Другое
Ищет следующие окна
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
Создает и запускает на исполнение
- 'C:\program files (x86)internet download manager\idman.exe'
