Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\Software\Classes\inffile\shell\open\command] '' = '<SYSTEM32>\NOTEPAD.EXE %1'
Устанавливает следующие настройки сервисов
- [<HKLM>\System\CurrentControlSet\Services\Wlansvc] 'Start' = '00000002'
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\drivertalent\!)清理残留.bat
- %APPDATA%\drivertalent\hardware\vr_info.xml
- %APPDATA%\drivertalent\hwinfosdk.dll
- %APPDATA%\drivertalent\infdrvsetup.dll
- %APPDATA%\drivertalent\key.dat
- %APPDATA%\drivertalent\lan\chinese-simplified.ini
- %APPDATA%\drivertalent\hardware\hwinfo\hardwareinfo.dll
- %APPDATA%\drivertalent\hardware\lan\language_hardware.ini
- %APPDATA%\drivertalent\lan\english.ini
- %APPDATA%\drivertalent\libcurl.dll
- %APPDATA%\drivertalent\monreboot.dll
- %APPDATA%\drivertalent\netprtdrv.dll
- %APPDATA%\drivertalent\netprtenum.dll
- %APPDATA%\drivertalent\nvaudcap32v.dll
- %APPDATA%\drivertalent\lan\systemlan.xml
- %APPDATA%\drivertalent\lan\userconfig.dat
- %APPDATA%\drivertalent\hardware\hwinfo\devicemanuf.db3
- %APPDATA%\drivertalent\hardware\hwinfo\cpuidsdk64.dll
- %APPDATA%\drivertalent\hardware\hwinfo\cpuidsdk.dll
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win8_x86\wdmaudio.inf
- %APPDATA%\drivertalent\dtldrvuninst.dll
- %APPDATA%\drivertalent\dtlplug.dll
- %APPDATA%\drivertalent\dtlplugs\cleanuninstall\cleanuninstall.dll
- %APPDATA%\drivertalent\dtlplugs\dtlprocrptv10\dtlprocrptv10.dll
- %APPDATA%\drivertalent\dtlplugs\dtlprocrptv10\pcid.dll
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win8_x64\wdmaudio.inf
- %APPDATA%\drivertalent\dtlplugs\dtlprocrptv10\procrpt.dll
- %APPDATA%\drivertalent\dtlui.dll
- %APPDATA%\drivertalent\gamerepair.exe
- %APPDATA%\drivertalent\gamerepair\directs32.exe
- %APPDATA%\drivertalent\gamerepair\directs64.exe
- %APPDATA%\drivertalent\gzipdll.dll
- %APPDATA%\drivertalent\hardware.exe
- %APPDATA%\drivertalent\dtlsdkconfig.dll
- %APPDATA%\drivertalent\nvaudcap64v.dll
- %APPDATA%\drivertalent\pcid.dll
- D:\ostotofolder\driversdownload\downloadinfo.db-journal
- %APPDATA%\drivertalent\pcidetect.dll
- %APPDATA%\drivertalent\soundcardrepair\power_service\win8.1 64 power.reg
- %APPDATA%\drivertalent\soundcardrepair\soundcardrepair.exe
- %APPDATA%\drivertalent\sqlcache.dll
- %APPDATA%\drivertalent\sqlite3.dll
- %APPDATA%\drivertalent\substat.dll
- %APPDATA%\drivertalent\soundcardrepair\power_service\win7 64 power.reg
- %APPDATA%\drivertalent\soundcardrepair\power_service\win8.1 32 power.reg
- %APPDATA%\drivertalent\udp.dll
- %APPDATA%\drivertalent\webad\wke.dll
- %APPDATA%\drivertalent\xldl.dll
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache101040022.db-journal
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache101040022.db
- %ALLUSERSPROFILE%\drivertalent\backuplist.dat
- %APPDATA%\drivertalent\usbenum.dll
- %APPDATA%\drivertalent\webad\dtlui.dll
- %APPDATA%\drivertalent\soundcardrepair\power_service\win7 32 power.reg
- %APPDATA%\drivertalent\soundcardrepair\power_service\win10 64 power.reg
- %APPDATA%\drivertalent\soundcardrepair\power_service\win10 32 power.reg
- %APPDATA%\drivertalent\pcioffdrv.dll
- %APPDATA%\drivertalent\pnpdrv.dll
- %APPDATA%\drivertalent\soundcardrepair\7z.dll
- %APPDATA%\drivertalent\soundcardrepair\amd_sysfile\amd_sata.sys
- %APPDATA%\drivertalent\soundcardrepair\amd_sysfile\amd_xata.sys
- %APPDATA%\drivertalent\soundcardrepair\andherewego.mp3
- %APPDATA%\drivertalent\pcidrv.dll
- %APPDATA%\drivertalent\soundcardrepair\drvinst32.exe
- %APPDATA%\drivertalent\soundcardrepair\dtlui.dll
- %APPDATA%\drivertalent\soundcardrepair\gzipdll.dll
- %APPDATA%\drivertalent\soundcardrepair\helpcore.dll
- %APPDATA%\drivertalent\soundcardrepair\helper.dll
- %APPDATA%\drivertalent\soundcardrepair\helper_res.7zz
- %APPDATA%\drivertalent\soundcardrepair\lan\scp_english.ini
- %APPDATA%\drivertalent\soundcardrepair\drvinst64.exe
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win8.1_x86\wdmaudio.inf
- %APPDATA%\drivertalent\p2spd.dll
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win8.1_x64\wdmaudio.inf
- %APPDATA%\drivertalent\drv64\drv32.exe
- %APPDATA%\drivertalent\download\dl_peer_id.dll
- %APPDATA%\drivertalent\download\download_engine.dll
- %APPDATA%\drivertalent\download\id.dat
- %APPDATA%\drivertalent\download\minithunderplatform.exe
- %APPDATA%\drivertalent\download\minizip.dll
- %APPDATA%\drivertalent\difxapi.dll
- %APPDATA%\drivertalent\download\atl71.dll
- %APPDATA%\drivertalent\download\msvcp71.dll
- %APPDATA%\drivertalent\download\zlib1.dll
- %APPDATA%\drivertalent\drivertalent.exe
- %APPDATA%\drivertalent\drv64\devcon32.exe
- %APPDATA%\drivertalent\drv64\devcon64.exe
- %APPDATA%\drivertalent\drv64\difxapi.dll
- %APPDATA%\drivertalent\download\msvcr71.dll
- %APPDATA%\drivertalent\download\xlbughandler.dll
- %APPDATA%\drivertalent\devcfg.dll
- %APPDATA%\drivertalent\detoured.dll
- %APPDATA%\drivertalent\data\devicemanuf.db3
- %APPDATA%\drivertalent\autosetup\filter.proc
- %APPDATA%\drivertalent\bios.dll
- %APPDATA%\drivertalent\config\audio_repair_1.png
- %APPDATA%\drivertalent\config\audio_repair_2.png
- %APPDATA%\drivertalent\config\externalapp.xml
- %APPDATA%\drivertalent\config\externalapptemp.xml
- %APPDATA%\drivertalent\7z.dll
- %APPDATA%\drivertalent\config\gamelist.json
- %APPDATA%\drivertalent\config\toolbox_png_gamerepair.png
- %APPDATA%\drivertalent\config\toolbox_png_hardwaredetection_1.png
- %APPDATA%\drivertalent\config\toolbox_png_hardwaredetection_2.png
- %APPDATA%\drivertalent\config\userconfig.dat
- %APPDATA%\drivertalent\cpuidsdk.dll
- %APPDATA%\drivertalent\cpuidsdk64.dll
- %APPDATA%\drivertalent\config\pricelist.json
- %APPDATA%\drivertalent\drv64\difxapi64.dll
- %APPDATA%\drivertalent\drv64\drv64.exe
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win7_x64\wdmaudio.inf
- %APPDATA%\drivertalent\drv64\drvsigner.exe
- %APPDATA%\drivertalent\dtldrv\dtldrv1\drv2.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv1\drv3.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv2\drv0.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv2\drv1.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv2\drv2.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv1\drv0.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv1\drv1.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv2\drv3.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv2.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv3.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv4.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv5.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv6.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv0.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv3\drv1.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv6.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv5.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv4.7zz
- %APPDATA%\drivertalent\drv64\signfile.exe
- %APPDATA%\drivertalent\drvallrepair.dll
- %APPDATA%\drivertalent\drvbak.dll
- %APPDATA%\drivertalent\drvget.dll
- %APPDATA%\drivertalent\drvsrc.dll
- %APPDATA%\drivertalent\dtinstui.dll
- %APPDATA%\drivertalent\drv64\drvsigner64.exe
- %APPDATA%\drivertalent\dtlautosetup.dll
- %APPDATA%\drivertalent\dtlconfig\unsetup.xml
- %APPDATA%\drivertalent\dtlconfig\wndconfigdata.xml
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv0.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv1.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv2.7zz
- %APPDATA%\drivertalent\dtldrv\dtldrv0\drv3.7zz
- %APPDATA%\drivertalent\dtlconfig\dtlsetup.xml
- %APPDATA%\drivertalent\dtldrv\wdmaudio\win7_x86\wdmaudio.inf
- D:\ostotofolder\driversdownload\downloadinfo.db
Удаляет следующие файлы
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache101040022.db-journal
- D:\ostotofolder\driversdownload\downloadinfo.db-journal
Подменяет следующие файлы
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache101040022.db-journal
- D:\ostotofolder\driversdownload\downloadinfo.db-journal
Сетевая активность
TCP
Запросы HTTP GET
- http://in#.####ng.drivethelife.com/api/pricelist
- http://in#.####ng.drivethelife.com/api/gamelist_component?v=#
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://www.dr####helife.com/dtclient-news-and-tech-fixes.html
- http://oc##.#tartssl.com/sub/class2/code/ca/MEMwQTA%2FMD0wOzAJBgUrDgMCGgUABBQSOgrhRCSnWfKxoWTjWxhk8hga9AQU0E4PQJlsuEsZbzsouODjiAc0qrcCAhAV
Запросы HTTP POST
- http://in#.####ng.drivethelife.com/api/networkspeed
- http://in#.#####arch.drivethelife.com/drvsearch.php
UDP
- DNS ASK in#.####ng.drivethelife.com
- DNS ASK di######.#ntegrate.drivethelife.com
- DNS ASK on#####.##tegrate.drivethelife.com
- DNS ASK be##########er.integrate.drivethelife.com
- DNS ASK dr####helife.com
- DNS ASK qu###.#rivethelife.com
- DNS ASK in#.#####arch.drivethelife.com
- DNS ASK microsoft.com
- DNS ASK li#####.drivethelife.com
- DNS ASK oc##.#tartssl.com
- 'di######.#ntegrate.drivethelife.com':3800
- 'di######.#ntegrate.drivethelife.com':6000
- 'di######.#ntegrate.drivethelife.com':6130
- 'qu###.#rivethelife.com':3000
- 'qu###.#rivethelife.com':4300
- 'qu###.#rivethelife.com':7000
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'TrayTool' WindowName: ''
Создает и запускает на исполнение
- '%APPDATA%\drivertalent\drivertalent.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\rundll32.exe' "%APPDATA%\DriverTalent\pcidetect.dll",HDRundllDetect
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%APPDATA%\drivertalent\drivertal...
