Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Classes\CLSID\{018CFDDC-A079-42DB-A9DC-A178A5EFE5E0}\shell\Open\Command] '' = 'iexplore.exe http://pindao.huoban.taobao.com/channel/channelCode.htm?pid=mm_10283620_0_0'
- [<HKLM>\SOFTWARE\Classes\CLSID\{932BFA8D-684F-4FE3-893C-8CA9680E45CD}\shell\Open\Command] '' = 'iexplore.exe http://www.97dn.com/?x'
- [<HKLM>\SOFTWARE\Classes\CLSID\{E1EF0E9E-901D-4BA3-842B-EACD122C0273}\shell\Open\Command] '' = 'iexplore.exe http://www.97lx.com/?x'
Modifies file system :
Creates the following files:
- %HOMEPATH%\Favorites\МФ±¦№єОп.url
- %HOMEPATH%\Favorites\АнПлПВФШ.url
- %PROGRAM_FILES%\Internet Explorer\Lpk.dll
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\45566НшЦ·µјєЅ.lnk
- %WINDIR%\Resources\tp1.ico
- %WINDIR%\Resources\dy1.ico
- %HOMEPATH%\Favorites\АнПлУ°Фє.url
- %WINDIR%\Resources\yx1.ico
Sets the 'hidden' attribute to the following files:
- %PROGRAM_FILES%\Internet Explorer\Lpk.dll
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\45566НшЦ·µјєЅ.lnk
Deletes itself.
