Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\Software\Classes\inffile\shell\open\command] '' = '<SYSTEM32>\NOTEPAD.EXE %1'
Устанавливает следующие настройки сервисов
- [<HKLM>\System\CurrentControlSet\Services\Wlansvc] 'Start' = '00000002'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\drivertalent\!)清除残留.bat
- %TEMP%\drivertalent\hardware\hwinfo\devicemanuf.db3
- %TEMP%\drivertalent\hardware\hwinfo\hardwareinfo.dll
- %TEMP%\drivertalent\hardware\lan\language_hardware.ini
- %TEMP%\drivertalent\hardware\vr_info.xml
- %TEMP%\drivertalent\hwinfosdk.dll
- %TEMP%\drivertalent\key.dat
- %TEMP%\drivertalent\netprtdrv.dll
- %TEMP%\drivertalent\lan\chinese-simplified.ini
- %TEMP%\drivertalent\lan\systemlan.xml
- %TEMP%\drivertalent\lan\userconfig.dat
- %TEMP%\drivertalent\libcurl.dll
- %TEMP%\drivertalent\libcurl_vs2015.dll
- %TEMP%\drivertalent\libdriversearch.dll
- %TEMP%\drivertalent\libnetwork.dll
- %TEMP%\drivertalent\hardware\hwinfo\cpuidsdk.dll
- %TEMP%\drivertalent\hardware\hwinfo\cpuidsdk64.dll
- %TEMP%\drivertalent\lan\english.ini
- %TEMP%\drivertalent\monreboot.dll
- %TEMP%\drivertalent\gamerepair\directs64.exe
- %TEMP%\drivertalent\dtldrv\wdmaudio\win7_x86\wdmaudio.inf
- %TEMP%\drivertalent\dtldrv\wdmaudio\win8.1_x64\wdmaudio.inf
- %TEMP%\drivertalent\dtldrv\wdmaudio\win8.1_x86\wdmaudio.inf
- %TEMP%\drivertalent\dtldrv\wdmaudio\win8_x64\wdmaudio.inf
- %TEMP%\drivertalent\dtldrv\wdmaudio\win8_x86\wdmaudio.inf
- %TEMP%\drivertalent\dtldrvuninst.dll
- %TEMP%\drivertalent\dtlplug.dll
- %TEMP%\drivertalent\dtlsdkconfig.dll
- %TEMP%\drivertalent\dtlui.dll
- %TEMP%\drivertalent\dtlzip.dll
- %TEMP%\drivertalent\filter.proc
- %TEMP%\drivertalent\gamerepair.exe
- %TEMP%\drivertalent\gamerepair\directs32.exe
- %TEMP%\drivertalent\gzipdll.dll
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv6.7zz
- %TEMP%\drivertalent\hardware.exe
- %TEMP%\drivertalent\drvallrepair.dll
- %TEMP%\drivertalent\netprtenum.dll
- %TEMP%\drivertalent\soundcardrepair\power_service\win7 32 power.reg
- %TEMP%\drivertalent\soundcardrepair\power_service\win8.1 32 power.reg
- %TEMP%\drivertalent\soundcardrepair\power_service\win8.1 64 power.reg
- %TEMP%\drivertalent\soundcardrepair\soundcardrepair.exe
- %TEMP%\drivertalent\sqlcache.dll
- %TEMP%\drivertalent\sqlite3.dll
- %TEMP%\drivertalent\substat.dll
- %TEMP%\drivertalent\nvaudcap32v.dll
- %TEMP%\drivertalent\usbenum.dll
- %APPDATA%\drivertalent\config\userconfig.dat
- %TEMP%\drivertalent\downloadinfo.db-journal
- %TEMP%\drivertalent\downloadinfo.db
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache8101040030.db-journal
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache8101040030.db
- %TEMP%\drivertalent\soundcardrepair\power_service\win10 64 power.reg
- %TEMP%\drivertalent\soundcardrepair\power_service\win10 32 power.reg
- %TEMP%\drivertalent\soundcardrepair\power_service\win7 64 power.reg
- %TEMP%\drivertalent\soundcardrepair\lan\scp_english.ini
- %TEMP%\drivertalent\soundcardrepair\helper_res.7zz
- %TEMP%\drivertalent\nvaudcap64v.dll
- %TEMP%\drivertalent\pcidetect.dll
- %TEMP%\drivertalent\pcidrv.dll
- %TEMP%\drivertalent\pcioffdrv.dll
- %TEMP%\drivertalent\pnpdrv.dll
- %TEMP%\drivertalent\soundcardrepair\7z.dll
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv5.7zz
- %TEMP%\drivertalent\soundcardrepair\amd_sysfile\amd_sata.sys
- %TEMP%\drivertalent\dtldrv\wdmaudio\win7_x64\wdmaudio.inf
- %TEMP%\drivertalent\soundcardrepair\andherewego.mp3
- %TEMP%\drivertalent\soundcardrepair\drvinst64.exe
- %TEMP%\drivertalent\soundcardrepair\dtlui.dll
- %TEMP%\drivertalent\soundcardrepair\gzipdll.dll
- %TEMP%\drivertalent\soundcardrepair\helpcore.dll
- %TEMP%\drivertalent\soundcardrepair\helper.dll
- %TEMP%\drivertalent\soundcardrepair\amd_sysfile\amd_xata.sys
- %TEMP%\drivertalent\pcid.dll
- %TEMP%\drivertalent\soundcardrepair\drvinst32.exe
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv4.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv3.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv2.7zz
- %TEMP%\drivertalent\config\pricelist.json
- %TEMP%\drivertalent\config\toolbox_png_conquerorlive_1.png
- %TEMP%\drivertalent\config\toolbox_png_conquerorlive_2.png
- %TEMP%\drivertalent\config\toolbox_png_gamerepair.png
- %TEMP%\drivertalent\config\toolbox_png_hardwaredetection_1.png
- %TEMP%\drivertalent\config\toolbox_png_hardwaredetection_2.png
- %TEMP%\drivertalent\config\userconfig.dat
- %TEMP%\drivertalent\cpuidsdk.dll
- %TEMP%\drivertalent\cpuidsdk64.dll
- %TEMP%\drivertalent\data\devicemanuf.db3
- %TEMP%\drivertalent\detoured.dll
- %TEMP%\drivertalent\devcfg.dll
- %TEMP%\drivertalent\difxapi.dll
- %TEMP%\drivertalent\config\externalapp.xml
- %TEMP%\drivertalent\config\audio_repair_1.png
- %TEMP%\drivertalent\config\gamelist.json
- %TEMP%\drivertalent\config\audio_repair_2.png
- %TEMP%\drivertalent\cache\softico\125-5.png
- %TEMP%\drivertalent\autosetup\dtldevcon64.exe
- %TEMP%\drivertalent\autosetup\difxapi.dll
- %TEMP%\drivertalent\autosetup\difxapi64.dll
- %TEMP%\drivertalent\autosetup\disablelogging.reg
- %TEMP%\drivertalent\autosetup\drv32.exe
- %TEMP%\drivertalent\autosetup\drv64.exe
- %TEMP%\drivertalent\autosetup\dtldevapi.dll
- %TEMP%\drivertalent\drivertalent.exe
- %ALLUSERSPROFILE%\drivertalent\backuplist.dat
- %TEMP%\drivertalent\autosetup\dtldevcon32.exe
- %TEMP%\drivertalent\autosetup\filter.proc
- %TEMP%\drivertalent\autosetup\innoextract.exe
- %TEMP%\drivertalent\bios.dll
- %TEMP%\drivertalent\cache\softico\125-1.png
- %TEMP%\drivertalent\cache\softico\125-10.png
- %TEMP%\drivertalent\cache\softico\125-2.png
- %TEMP%\drivertalent\7z.dll
- %TEMP%\drivertalent\autosetup\enablefulllogging.reg
- %TEMP%\drivertalent\zlibwapi.dll
- %TEMP%\drivertalent\drv64\dev32.exe
- %TEMP%\drivertalent\drv64\difxapi.dll
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv4.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv5.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv6.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv1\drv0.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv1\drv1.7zz
- %TEMP%\drivertalent\config\externalapptemp.xml
- %TEMP%\drivertalent\dtldrv\dtldrv1\drv2.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv2\drv0.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv2\drv1.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv2\drv2.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv2\drv3.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv0.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv3\drv1.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv1.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv1\drv3.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv3.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv2.7zz
- %TEMP%\drivertalent\dtldrv\dtldrv0\drv0.7zz
- %TEMP%\drivertalent\dtlconfig\wndconfigdata.xml
- %TEMP%\drivertalent\drv64\difxapi64.dll
- %TEMP%\drivertalent\drv64\drv32.exe
- %TEMP%\drivertalent\drv64\drv64.exe
- %TEMP%\drivertalent\drv64\drvsigner.exe
- %TEMP%\drivertalent\drv64\drvsigner64.exe
- %TEMP%\drivertalent\drv64\dev64.exe
- %TEMP%\drivertalent\drv64\signfile.exe
- %TEMP%\drivertalent\drv64\devcon32.exe
- %TEMP%\drivertalent\drvbak.dll
- %TEMP%\drivertalent\dtinstui.dll
- %TEMP%\drivertalent\dtl7z.dll
- %TEMP%\drivertalent\dtl7z.exe
- %TEMP%\drivertalent\dtlautosetup.dll
- %TEMP%\drivertalent\dtlconfig\dtlsetup.xml
- %TEMP%\drivertalent\drv64\devcon64.exe
- %TEMP%\drivertalent\dtlconfig\unsetup.xml
- %TEMP%\drivertalent\drvget.dll
- %TEMP%\drivertalent\config\pricelist8.json
Удаляет следующие файлы
- %TEMP%\drivertalent\downloadinfo.db-journal
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache8101040030.db-journal
Подменяет следующие файлы
- %TEMP%\drivertalent\downloadinfo.db-journal
- %ALLUSERSPROFILE%\drivertalent\dtldrvcache8101040030.db-journal
Сетевая активность
Подключается к
- 'localhost':49176
- 'in#.####ng.drivethelife.com':80
- 'localhost':49179
- 'li#####.drivethelife.com':80
- 'localhost':49182
- 'localhost':49184
- 'in#.####ng.drivethelife.com':443
- 'localhost':49190
- 'dr#######ry2.drivethelife.com':443
- 'localhost':49193
- 'localhost':49196
- 'localhost':49199
- 'localhost':49202
- 'oc##.##ust-provider.cn':80
TCP
Запросы HTTP GET
- http://in#.####ng.drivethelife.com/api/gamelist_component?v=#
- http://www.dr####helife.com/dtclient-news-and-tech-fixes.html
- http://in#.####ng.drivethelife.com/api/intdtpricelist8.json?a=####################################################
- http://oc##.##ust-provider.cn/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQDhvjmfMdSVsHZ9u52p9jqu3rd8gQUXzp8ERB%2BDGdxYdyLo7UAA2f1VxwCEExV%2F4KNb5yQaFg3H%2BVsGOo%3D
Запросы HTTP POST
- http://in#.####ng.drivethelife.com/api/networkspeed
- http://li#####.drivethelife.com/v2/activate
Другие
- 'localhost':49176
- 'localhost':49200
- 'localhost':49199
- 'localhost':49197
- 'localhost':49196
- 'localhost':49194
- 'localhost':49193
- 'dr#######ry2.drivethelife.com':443
- 'localhost':49191
- 'localhost':49190
- 'in#.####ng.drivethelife.com':443
- 'localhost':49185
- 'localhost':49183
- 'localhost':49184
- 'localhost':49182
- 'localhost':49180
- 'localhost':49179
- 'localhost':49177
- 'localhost':49202
- 'localhost':49203
UDP
- DNS ASK in#.####ng.drivethelife.com
- DNS ASK di######.#ntegrate.drivethelife.com
- DNS ASK on#####.##tegrate.drivethelife.com
- DNS ASK be##########er.integrate.drivethelife.com
- DNS ASK li#####.drivethelife.com
- DNS ASK dr####helife.com
- DNS ASK dr#######ry2.drivethelife.com
- DNS ASK oc##.##ust-provider.cn
- 'di######.#ntegrate.drivethelife.com':3800
- 'di######.#ntegrate.drivethelife.com':6000
- 'di######.#ntegrate.drivethelife.com':6130
Другое
Ищет следующие окна
- ClassName: 'TrayTool' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'DriverTalent_DTCleaner' WindowName: 'DTCleaner'
Создает и запускает на исполнение
- '%TEMP%\drivertalent\drivertalent.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\rundll32.exe' "%TEMP%\DriverTalent\pcidetect.dll",HDRundllDetect
