Техническая информация
- [<HKLM>\SOFTWARE\Classes\xfopen\shell\open\command] '' = '"<Текущая директория>\downlink.exe" "%1"'
- %TEMP%\xuanfeng.ini
- 'up#.###nfengplayer.com':80
- up#.###nfengplayer.com/config.ini
- up#.###nfengplayer.com/up.txt
- DNS ASK up#.###.xuanfengplayer.com
- DNS ASK up#.###nfengplayer.com