Техническая информация
- [<HKLM>\SOFTWARE\Classes\HaoZip.tgz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.arj\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.tbz2\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.rpm\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.cab\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.lha\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.lzma\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.7z\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.swm\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.cpio\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.rar.split\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.isz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.xz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.zip.split\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.ace\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.lzma86\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.jar\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.uue\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.001\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.tbz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.bz2\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.xpi\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.z\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.tpz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.tar\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.zip\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.gz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.dmg\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.lzh\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.bzip2\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.xar\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.taz\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.deb\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.gzip\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.rar\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.wim\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.hfs\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\HaoZip.iso\shell\open\command] '' = '"%PROGRAM_FILES%\HaoZip\HaoZip.exe" "%1"'
- [<HKLM>\SYSTEM\ControlSet001\Services\AudioSrv] 'Start' = '00000002'
- '%PROGRAM_FILES%\HaoZip\HaoZipLoader.exe' -install01
- '%PROGRAM_FILES%\HaoZip\HaoZipUpdate.exe' -install
- '%APPDATA%\install88612765.exe' <Полный путь к вирусу> -s<Полный путь к вирусу>
- '%APPDATA%\hy.exe'
- %HOMEPATH%\Start Menu\Programs\好压软件\好压.lnk
- %HOMEPATH%\Start Menu\好压.lnk
- <SYSTEM32>\kbamqvedcv
- %HOMEPATH%\Start Menu\Programs\好压软件\好压批量字符替换工具.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\好压批量文件改名工具.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\好压MD5校验工具.lnk
- <SYSTEM32>\51E92691.rdb
- %PROGRAM_FILES%\HaoZip\sfx\HaoZip7zSetup.sfx
- %PROGRAM_FILES%\HaoZip\Rar.exe
- %PROGRAM_FILES%\HaoZip\UNACEV2.DLL
- %TEMP%\nse4.tmp\FileInfo.dll
- %PROGRAM_FILES%\HaoZip\Uninstall.exe
- %PROGRAM_FILES%\HaoZip\HaoZipExt.dll
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压帮助指南.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压图片转换工具.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压批量字符替换工具.lnk
- %PROGRAM_FILES%\HaoZip\config\temp\pending.hzt
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\卸载好压.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压版本升级.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压批量文件改名工具.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\好压版本升级.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\好压帮助指南.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\好压图片转换工具.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压MD5校验工具.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\好压软件\好压.lnk
- %HOMEPATH%\Start Menu\Programs\好压软件\卸载好压.lnk
- %PROGRAM_FILES%\HaoZip\HaoZipFormats.dll
- %PROGRAM_FILES%\HaoZip\HaoZipUpdate.exe
- %PROGRAM_FILES%\HaoZip\HaoZipC.exe
- %PROGRAM_FILES%\HaoZip\HaoZip.exe
- %PROGRAM_FILES%\HaoZip\lang\HaoZipLang_chs.dll
- %PROGRAM_FILES%\HaoZip\HaoZipShell.dll
- %PROGRAM_FILES%\HaoZip\HaoZipLoader.exe
- %TEMP%\nse4.tmp\System.dll
- %TEMP%\nsy3.tmp
- %APPDATA%\hy.exe
- %APPDATA%\install88612765.exe
- %TEMP%\lnmcidjgxn.dat
- %APPDATA%\fcujvrsnr
- %TEMP%\nse4.tmp\option.ini
- %PROGRAM_FILES%\HaoZip\msvcr80.dll
- %PROGRAM_FILES%\HaoZip\Microsoft.VC80.CRT.manifest
- %PROGRAM_FILES%\HaoZip\Benchmark.data
- %PROGRAM_FILES%\HaoZip\HaoZipVersion.dll
- %PROGRAM_FILES%\HaoZip\HaoZipImage.dll
- %PROGRAM_FILES%\HaoZip\HaoZipCompress.dll
- %PROGRAM_FILES%\HaoZip\RarNew.data
- %PROGRAM_FILES%\HaoZip\好压免责声明.txt
- %PROGRAM_FILES%\HaoZip\HaoZip.chm
- %PROGRAM_FILES%\HaoZip\config\HaoZipLang.ini
- %PROGRAM_FILES%\HaoZip\TarNew.data
- %PROGRAM_FILES%\HaoZip\ZipNew.data
- %PROGRAM_FILES%\HaoZip\7zNew.data
- %HOMEPATH%\Start Menu\好压.lnk
- %APPDATA%\ins
- %TEMP%\nse4.tmp\FileInfo.dll
- %TEMP%\nse4.tmp\System.dll
- %TEMP%\nse4.tmp\option.ini
- <SYSTEM32>\config\AppEvent.Evt
- %APPDATA%\fcujvrsnr
- <SYSTEM32>\config\SecEvent.Evt
- <SYSTEM32>\config\SysEvent.Evt
- <SYSTEM32>\kbamqvedcv
- %TEMP%\lnmcidjgxn.dat в %PROGRAM_FILES%\Realtek\Driver\Date\R%SESSIONNAME%\cvgfq.cc3
- %APPDATA%\install88612765.exe в %APPDATA%\ins
- 'up####.haozip.com':80
- 'gt####cd.gicp.net':321
- up####.haozip.com/
- DNS ASK www.ba##u.com
- DNS ASK st####.360safe.com
- DNS ASK st##.#60safe.com
- DNS ASK qd.##de.360.cn
- DNS ASK qd.###e.qihoo.com
- DNS ASK tr.#.360.cn
- DNS ASK up####h.360safe.com
- DNS ASK up#####s.360safe.com
- DNS ASK www.16#.com
- DNS ASK up####.360safe.com
- DNS ASK sd###.360.cn
- DNS ASK u.###l.f.360.cn
- DNS ASK qu##.f.360.cn
- DNS ASK qu#.#.360.cn
- DNS ASK co##.f.360.cn
- DNS ASK gt####cd.gicp.net
- DNS ASK up####.haozip.com
- DNS ASK sd##.qh-lb.com
- DNS ASK sd##.360.cn
- DNS ASK qu##.qh-lb.com
- DNS ASK qu#.#h-lb.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'