Техническая информация
Вредоносные функции
Для затруднения выявления своего присутствия в системе
изменяет следующие системные настройки:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoSMHelp' = '00000001'
Изменяет следующие настройки браузера Windows Internet Explorer
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
Без разрешения пользователя устанавливает новую стартовую страницу для Windows Internet Explorer.
Изменения в файловой системе
Создает следующие файлы
- %ProgramFiles%\potplayer_v1.5_build26387\loading.swf
- %ProgramFiles%\potplayer_v1.5_build26387\dtdrop.exe
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\potplayer.exe
- %ProgramFiles%\potplayer_v1.5_build26387\potplayermini.exe
- %ProgramFiles%\potplayer_v1.5_build26387\atextout.dll
- %ProgramFiles%\potplayer_v1.5_build26387\atrc.dll
- %ProgramFiles%\potplayer_v1.5_build26387\audfilt.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass_alac.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass_ape.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass_flac.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass_mpc.dll
- %ProgramFiles%\potplayer_v1.5_build26387\bass_tta.dll
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\letterbox.txt
- %ProgramFiles%\potplayer_v1.5_build26387\bass_wv.dll
- %ProgramFiles%\potplayer_v1.5_build26387\d3dx9sab.dll
- %ProgramFiles%\potplayer_v1.5_build26387\desktophook.dll
- %ProgramFiles%\potplayer_v1.5_build26387\drvc.dll
- %ProgramFiles%\potplayer_v1.5_build26387\ffcodec.dll
- %ProgramFiles%\potplayer_v1.5_build26387\ffcodecmt.dll
- %ProgramFiles%\potplayer_v1.5_build26387\mediainfo.dll
- %ProgramFiles%\potplayer_v1.5_build26387\mp3lame.dll
- %ProgramFiles%\potplayer_v1.5_build26387\pncrt.dll
- %ProgramFiles%\potplayer_v1.5_build26387\poticons.dll
- %ProgramFiles%\potplayer_v1.5_build26387\potplayer.dll
- %ProgramFiles%\potplayer_v1.5_build26387\qscl.dll
- %ProgramFiles%\potplayer_v1.5_build26387\sipr.dll
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\wave.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\yv12 chroma upsampling.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\unsharp mask.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\undot.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\spotlight.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\bt601bt701.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\bt601bt709.txt
- %ProgramFiles%\potplayer_v1.5_build26387\cmdline.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\contour.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\deinterlace (blend).txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\denoise.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\displaylessthan16 v1_1.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\edgesharpen v1_1(jim ro).txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\edgesharpen v1_1.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\emboss.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\grayscale.txt
- %ProgramFiles%\potplayer_v1.5_build26387\history.txt
- C:\users\public\desktop\potplayer.lnk
- %ProgramFiles%\potplayer_v1.5_build26387\cook.dll
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\invert.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\levels2.txt
- %ProgramFiles%\potplayer_v1.5_build26387\license.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\nightvision.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\procamp.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\remap_16_235.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpen.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpencomplex (jim ro).txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpencomplex2.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpenflou (jim ro).txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpen_3x3.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sharpen_5x5.txt
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\sphere.txt
- %ProgramFiles%\potplayer_v1.5_build26387\logomini.swf
- %ProgramFiles%\potplayer_v1.5_build26387\pxshader\levels.txt
- %WINDIR%\syswow64\xp优化.reg
Другое
Ищет следующие окна
- ClassName: 'RegEdit_RegEdit' WindowName: ''
Создает и запускает на исполнение
- '%ProgramFiles%\potplayer_v1.5_build26387\pxshader\potplayer.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\regedit.exe' /s XP优化.reg "<SYSTEM32>\XP优化.reg"
