Trojan.DownLoader15.4413

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Classes\youxunapk\Shell\OPEN\Command] '' = '"%PROGRAM_FILES%\YouXunBox\shoujizhushou.exe" "%1"'

Вредоносные функции:

Создает и запускает на исполнение:

'%PROGRAM_FILES%\YouXunBox\Youxun.exe' ?gamename=&pic=MZ&gameid=&phonegametype=1

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\YouXunBox\skins\Common\fk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\FilePath.png
%PROGRAM_FILES%\YouXunBox\skins\Common\EditBorder.png
%PROGRAM_FILES%\YouXunBox\skins\Common\error_ico.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gameback.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gamecover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\fl_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dstop.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dopen.png
%PROGRAM_FILES%\YouXunBox\skins\Common\down-btb.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dl_menu_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dlprior.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dl_menu_gray.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downtab.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dstar.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downstu.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downbk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\downing.png
%PROGRAM_FILES%\YouXunBox\skins\Common\gametag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mtitle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mycover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\morebg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\message.png
%PROGRAM_FILES%\YouXunBox\skins\Common\min2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mymore.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mypage.png
%PROGRAM_FILES%\YouXunBox\skins\Common\myleft.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mydeclare.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mydelete.png
%PROGRAM_FILES%\YouXunBox\skins\Common\meok.png
%PROGRAM_FILES%\YouXunBox\skins\Common\install_apk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\left_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\igame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\game_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\icon_delete.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mecancle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\megtip.png
%PROGRAM_FILES%\YouXunBox\skins\Common\main.ico
%PROGRAM_FILES%\YouXunBox\skins\Common\loading.png
%PROGRAM_FILES%\YouXunBox\skins\Common\logo.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\sju_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\ts_close.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\sjok.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\problem.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\qd_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\yxsjb_derror.png
%PROGRAM_FILES%\YouXunBox\skins\Common\aclose.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\yxsjb_aerror.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\usb_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\v_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\ok_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\impro_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\install_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\img_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_ts_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\help-btb.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\loading_t.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\nosj.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\k_set.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\jcsj_bg.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\k_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\allgame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\customers.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ddele.png
%PROGRAM_FILES%\YouXunBox\skins\Common\cok.png
%PROGRAM_FILES%\YouXunBox\skins\Common\close_tag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\cno.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\defaultico.png
%PROGRAM_FILES%\YouXunBox\skins\Common\dj_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\Close2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\back_pl.png
%PROGRAM_FILES%\YouXunBox\skins\Common\big.png
%PROGRAM_FILES%\YouXunBox\skins\Common\back.png
%PROGRAM_FILES%\YouXunBox\skins\Common\allgame_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\animate.png
%PROGRAM_FILES%\YouXunBox\skins\Common\checkbox.png
%PROGRAM_FILES%\YouXunBox\skins\Common\close.png
%PROGRAM_FILES%\YouXunBox\skins\Common\capaciity.png
%PROGRAM_FILES%\YouXunBox\skins\Common\bottom_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\Cancle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\mypostion.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_jp_r.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\click.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_jp.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_cq.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_ime.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\gbsybtn.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\ksbtn.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\downtilt.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\cxksbtn.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\downslide.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btn_close.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ts_bottom_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\wg_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\back.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\btnset.png
%PROGRAM_FILES%\YouXunBox\skins\Common\xiufu_ico.png
%PROGRAM_FILES%\YouXunBox\skins\Common\xiufu_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\xiufu_btn2.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\leftslide.png
%PROGRAM_FILES%\YouXunBox\Youxun.exe
%PROGRAM_FILES%\YouXunBox\yxpcgame.exe
%PROGRAM_FILES%\YouXunBox\xldl.dll
%PROGRAM_FILES%\YouXunBox\uninst.exe
%PROGRAM_FILES%\YouXunBox\unrar.dll
%HOMEPATH%\Desktop\游迅游戏盒.lnk
%PROGRAM_FILES%\YouXunBox\Log.txt
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\我的游戏.lnk
%PROGRAM_FILES%\YouXunBox\yxphonegame.exe
%PROGRAM_FILES%\YouXunBox\我的游戏.lnk
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\ztbtn.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\rightslide.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\righttilt.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\qp_sq.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\lefttilt.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\nav_bg.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\upslide.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\uptilt.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\sybtn.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\screen.png
%PROGRAM_FILES%\YouXunBox\skins\yxphonegame\sqqpbtn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\right_big.png
%PROGRAM_FILES%\YouXunBox\skins\Common\right_ico.png
%PROGRAM_FILES%\YouXunBox\skins\Common\refresh.png
%PROGRAM_FILES%\YouXunBox\skins\Common\radio.png
%PROGRAM_FILES%\YouXunBox\skins\Common\recheck.png
%PROGRAM_FILES%\YouXunBox\skins\Common\settab.png
%PROGRAM_FILES%\YouXunBox\skins\Common\SetTitle.png
%PROGRAM_FILES%\YouXunBox\skins\Common\seting.png
%PROGRAM_FILES%\YouXunBox\skins\Common\search.png
%PROGRAM_FILES%\YouXunBox\skins\Common\search_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ques.png
%PROGRAM_FILES%\YouXunBox\skins\Common\net.png
%PROGRAM_FILES%\YouXunBox\skins\Common\newtag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\nav_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\myright.png
%PROGRAM_FILES%\YouXunBox\skins\Common\nav_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\progressBK.png
%PROGRAM_FILES%\YouXunBox\skins\Common\protype.png
%PROGRAM_FILES%\YouXunBox\skins\Common\progress.png
%PROGRAM_FILES%\YouXunBox\skins\Common\ok.png
%PROGRAM_FILES%\YouXunBox\skins\Common\Option_main.png
%PROGRAM_FILES%\YouXunBox\skins\Common\shadow.png
%PROGRAM_FILES%\YouXunBox\skins\Common\task_menu_gray.png
%PROGRAM_FILES%\YouXunBox\skins\Common\task_menu_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\task_menu.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tagbk.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tag_bg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox_btn.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox_close.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tsbox.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tray_menu.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tray_menu_hover.png
%PROGRAM_FILES%\YouXunBox\skins\Common\tag.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_titlebg_1.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_titlebg_2.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_listbg_end.png
%PROGRAM_FILES%\YouXunBox\skins\Common\share.png
%PROGRAM_FILES%\YouXunBox\skins\Common\sj_listbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\start.png
%PROGRAM_FILES%\YouXunBox\skins\Common\startgame.png
%PROGRAM_FILES%\YouXunBox\skins\Common\starbg.png
%PROGRAM_FILES%\YouXunBox\skins\Common\small.png
%PROGRAM_FILES%\YouXunBox\skins\Common\star.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morepx_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\more_tb.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morepx_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\loading_pz.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\morefn_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\opa75.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\pageboxdowntitle.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\no_img_m.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\nosy.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\no_img.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview_Rbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\jp_ts.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview_Lbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgprev_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgview.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\list_tjbg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\loader.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\list_newbg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\left_nav_bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\left_nav_pl.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\page_button_bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\box_five\item_wy.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\box2.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\item_wl.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\item_dj.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\item_sy.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\item_wl.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\jquery.1.9.1.min.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\item_sy.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\imagesloaded.pkgd.min.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\item_dj.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\index.html
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ph_mub.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\qrod_box_826.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\pfsussce.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\page_m_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\page_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\title_bom_bg_a.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\zz_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\title_bom_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\star.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\start.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\jscrollpane.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\120x120.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\item_sy.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\item.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\item_dj.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_next.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_prev.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\adbg_close.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\120x170.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\adbag.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\downpage_wl.css
%PROGRAM_FILES%\YouXunBox\Cache\apk\adb.exe
%PROGRAM_FILES%\YouXunBox\Cache\apk\AdbWinApi.dll
%PROGRAM_FILES%\YouXunBox\Cache\apk\aapt.exe
%PROGRAM_FILES%\main.zip
%PROGRAM_FILES%\YouXunBox\7z.dll
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\boxdown_pl.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\downpage.css
%PROGRAM_FILES%\YouXunBox\Cache\box_five\css\box.css
%PROGRAM_FILES%\YouXunBox\Cache\apk\AdbWinUsbApi.dll
%PROGRAM_FILES%\YouXunBox\Cache\box_five\config.ini
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_scroll_back.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\game_pxbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gl_dbtn.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg_pl_a.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg_pl_b.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgbtn.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imgnext_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\imagezz.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gl_dbtn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\icon_keys.gif
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\gameinfo_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\box_fImg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\deful_gamehj.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\boxitem_Img.psd
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\ad_scroll_forward.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\boxitem_Img.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_rank_pl.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\error.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_rank_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\downImg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\images\down_page_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\jquery.ba-resize.min.js
%PROGRAM_FILES%\YouXunBox\download\download_engine.dll
%PROGRAM_FILES%\YouXunBox\download\id.dat
%PROGRAM_FILES%\YouXunBox\download\dl_peer_id.dll
%PROGRAM_FILES%\YouXunBox\download\atl71.dll
%PROGRAM_FILES%\YouXunBox\download\dl_lib.dll
%PROGRAM_FILES%\YouXunBox\download\msvcr71.dll
%PROGRAM_FILES%\YouXunBox\download\XLBugHandler.dll
%PROGRAM_FILES%\YouXunBox\download\msvcp71.dll
%PROGRAM_FILES%\YouXunBox\download\MiniThunderPlatform.exe
%PROGRAM_FILES%\YouXunBox\download\minizip.dll
%PROGRAM_FILES%\YouXunBox\Data\allgameleft.json
%PROGRAM_FILES%\YouXunBox\Cache\js\jquery.1.9.1.min.js
%PROGRAM_FILES%\YouXunBox\Cache\js\pztc_con.js
%PROGRAM_FILES%\YouXunBox\Cache\js\get_con.js
%PROGRAM_FILES%\YouXunBox\Cache\images\win-64.png
%PROGRAM_FILES%\YouXunBox\Cache\images\zzpz.gif
%PROGRAM_FILES%\YouXunBox\Cache\tc.css
%PROGRAM_FILES%\YouXunBox\Config.ini
%PROGRAM_FILES%\YouXunBox\Cache\share.html
%PROGRAM_FILES%\YouXunBox\Cache\loading.html
%PROGRAM_FILES%\YouXunBox\Cache\loading_con.html
%PROGRAM_FILES%\YouXunBox\download\XLBugReport.exe
%PROGRAM_FILES%\YouXunBox\skins\assistant\errordown.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error_sq.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\cs_install.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\dklj.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_btn.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fs_succes.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fsbox_yy.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\error_tb.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\fsbox_loading.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\bg.png
%PROGRAM_FILES%\YouXunBox\glut32.dll
%PROGRAM_FILES%\YouXunBox\msvcp71.dll
%PROGRAM_FILES%\YouXunBox\glut.dll
%PROGRAM_FILES%\YouXunBox\download\XLCrypto.dll
%PROGRAM_FILES%\YouXunBox\download\zlib1.dll
%PROGRAM_FILES%\YouXunBox\skins\assistant\a1.png
%PROGRAM_FILES%\YouXunBox\skins\assistant\a1_img.png
%PROGRAM_FILES%\YouXunBox\shoujizhushou.exe
%PROGRAM_FILES%\YouXunBox\msvcr71.dll
%PROGRAM_FILES%\YouXunBox\MyGame.ico
%PROGRAM_FILES%\YouXunBox\Cache\images\gamestartImg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\img_loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\fxcg_bg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\close-btn.png
%PROGRAM_FILES%\YouXunBox\Cache\images\fx-btn.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_comment_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_tool.png
%PROGRAM_FILES%\YouXunBox\Cache\images\left_comment.png
%PROGRAM_FILES%\YouXunBox\Cache\images\jt-ts.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\khd-pzImg.png
%PROGRAM_FILES%\YouXunBox\Cache\images\ck_btn.png
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\pl.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\qrcode.min.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\pinglun.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\jquery.raty.min.js
%PROGRAM_FILES%\YouXunBox\Cache\box_five\js\lightbox.js
%PROGRAM_FILES%\YouXunBox\Cache\images\bg.jpg
%PROGRAM_FILES%\YouXunBox\Cache\images\bottompz-bg.png
%PROGRAM_FILES%\YouXunBox\Cache\css\peizi.css
%PROGRAM_FILES%\YouXunBox\Cache\check.html
%PROGRAM_FILES%\YouXunBox\Cache\css\gamestart_con.css
%PROGRAM_FILES%\YouXunBox\Cache\images\left_tool_hover.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-ati.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-intel.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-amd.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pzdf-pl.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pzwin_close.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-winxp.png
%PROGRAM_FILES%\YouXunBox\Cache\images\win-32.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-win7.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-nvidia.png
%PROGRAM_FILES%\YouXunBox\Cache\images\tb-vista.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-tc-pl.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-error.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-noinfo.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pl2.png
%PROGRAM_FILES%\YouXunBox\Cache\images\loading.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\loading_text.gif
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-df.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-jiao.png
%PROGRAM_FILES%\YouXunBox\Cache\images\pz-bg-img.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-ok.png
%PROGRAM_FILES%\YouXunBox\Cache\images\px-right.png

Удаляет следующие файлы:

%PROGRAM_FILES%\main.zip

Сетевая активность:

Подключается к:

'localhost':1043
'i.###own.com':80
'ad#.#xdown.com':80
'bo###.uuuo.com':80
'ap#.##ouji56.com':80
'to#####.box.uuuo.com':80
'to####.ziyuan.uuuo.com':80
'ap#.##x.uuuo.com':80

TCP:

Запросы HTTP GET:

http://ap#.##x.uuuo.com/open/pc/soft/list.json?ci#########################################################
http://ad#.#xdown.com/ad.ashx/boxtiepian.json
http://ap#.##x.uuuo.com/open/wg/game/list.json?op#############################
http://ap#.##x.uuuo.com/open/qp/game/list.json?op###############################
http://ap#.##x.uuuo.com/open/ng/game/list.json?ci##########################################################
http://bo###.uuuo.com/yxh/setting.json
http://ap#.##ouji56.com/views/softlist.ashx/getone2?id#
http://to#####.box.uuuo.com/count.do?sc##########################################################################################################################################################...
http://ap#.##x.uuuo.com/open/group/data.json?ke##################################################################################################################################################...
http://i.###own.com/api/op.ashx/login/islogin.js?ca#############################
http://to####.ziyuan.uuuo.com/count?ke########################

UDP:

DNS ASK i.###own.com
DNS ASK bo###.uuuo.com
DNS ASK ad#.#xdown.com
DNS ASK to####.ziyuan.uuuo.com
DNS ASK to#####.box.uuuo.com
DNS ASK ap#.##ouji56.com
DNS ASK ap#.##x.uuuo.com

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней