Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\auteed1.tmp
- %TEMP%\netboy.dll
- %TEMP%\auteef1.tmp
- %TEMP%\netboy.she
- %LOCALAPPDATA%\microsoft\internet explorer\domstore\saz46qqj\mini.app.iqiyi[1].xml
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sxx
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\settings.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyiclientflash.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_histories.sxx
Удаляет следующие файлы
- %TEMP%\auteed1.tmp
- %TEMP%\auteef1.tmp
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sol
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyiclientflash.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_histories.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sol
Перемещает следующие файлы
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sxx в %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sol
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sxx в %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sol
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyiclientflash.sxx в %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyiclientflash.sol
Изменяет следующие файлы
Подменяет следующие файлы
- %APPDATA%\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sxx
- %APPDATA%\macromedia\flash player\macromedia.com\support\flashplayer\sys\#www.iqiyi.com\settings.sol
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyiclientflash.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sxx
- %APPDATA%\macromedia\flash player\#sharedobjects\y6xx3t6b\www.iqiyi.com\qiyi_statistics.sol
Сетевая активность
Подключается к
- 'iq##i.com':80
- 'st###c.qiyi.com':80
- 'b.#####cardresearch.com':80
- 'tr###.#ideo.qiyi.com':80
- 'sb.#####cardresearch.com':443
- 'qi##pic.com':80
- 'ns####k.baidu.com':80
- 'da###.baidu.com':80
- 'cp##.baidu.com':80
- 'da###.baidu.com':443
- 'ms#.qy.net':80
- 'ms#.##deo.qiyi.com':80
- 'di######er.video.qiyi.com':80
- 'fp######ad2.macromedia.com':80
- 'da##.#ideo.qiyi.com':80
TCP
Запросы HTTP GET
- http://st###c.qiyi.com/css/common/app_css/style.css
- http://st###c.qiyi.com/js/mini2.0/config.js
- http://st###c.qiyi.com/js/lib/sea1.2.js
- http://st###c.qiyi.com/js/pingback/iwt.js
- http://www.qi##pic.com/common/fix/app_images/logo.jpg
- http://www.qi##pic.com/common/images/load.gif
- http://www.qi##pic.com/common/fix/app_images/formBg.jpg
- http://www.qi##pic.com/common/fix/app_images/mini2Bg_02.jpg
- http://www.qi##pic.com/common/fix/app_images/mini2Bg.png
- http://www.qi##pic.com/common/fix/app_images/lr.jpg
- http://www.qi##pic.com/common/fix/play_images/Icon.gif
- http://www.qi##pic.com/common/fix/app_images/rg.jpg
- http://st####.iqiyi.com/js/l/mini2.0/20131210180947/base.js
- http://di######er.video.qiyi.com/mini/focus/
- http://da##.#ideo.qiyi.com/uid?tn###################
UDP
- DNS ASK iq##i.com
- DNS ASK fp######ad2.macromedia.com
- DNS ASK di######er.video.qiyi.com
- DNS ASK ms#.##deo.qiyi.com
- DNS ASK ms#.qy.net
- DNS ASK st#.##iyipic.com
- DNS ASK m.###ting.com
- DNS ASK cp##.baidu.com
- DNS ASK ns####k.baidu.com
- DNS ASK da###.baidu.com
- DNS ASK sb.#####cardresearch.com
- DNS ASK iq###.irs01.com
- DNS ASK tr###.#ideo.qiyi.com
- DNS ASK b.#####cardresearch.com
- DNS ASK st####.iqiyi.com
- DNS ASK qi##pic.com
- DNS ASK st###c.qiyi.com
- DNS ASK mi##.#pp.iqiyi.com
- DNS ASK da##.#ideo.qiyi.com
- DNS ASK ms#.#qiyi.com
Другое
Ищет следующие окна
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
