Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ekan' = '%PROGRAM_FILES%\ekanvod\ekanjs.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ekanvod' = '%PROGRAM_FILES%\ekanvod\ekplay.exe'
- [<HKLM>\SOFTWARE\Classes\xmlfile\shell\Open\command] '' = ''
- [<HKLM>\SOFTWARE\Classes\xslfile\shell\Open\command] '' = ''
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%PROGRAM_FILES%\ekanvod\Qvod\QvodTerminal.exe' = '%PROGRAM_FILES%\ekanvod\Qvod\QvodTerminal.exe:*:Enabled:QVOD'
- %PROGRAM_FILES%\ekanvod\ekplay.exe
- %PROGRAM_FILES%\ekanvod\Qvod\QvodPlayer.exe -autorun
- %PROGRAM_FILES%\ekanvod\Qvod\QvodInit.exe setup
- %PROGRAM_FILES%\ekanvod\Qvod\QvodTerminal.exe
- %TEMP%\RGID.tmp
- %TEMP%\RGIC.tmp
- %TEMP%\RGIB.tmp
- %TEMP%\RGI10.tmp
- %TEMP%\RGIF.tmp
- %TEMP%\RGIE.tmp
- %TEMP%\RGI7.tmp
- %TEMP%\RGI6.tmp
- %TEMP%\RGI5.tmp
- %TEMP%\RGIA.tmp
- %TEMP%\RGI9.tmp
- %TEMP%\RGI8.tmp
- %PROGRAM_FILES%\ekanvod\c.htm
- %PROGRAM_FILES%\ekanvod\MSINET.OCX
- %PROGRAM_FILES%\ekanvod\LiteUnzip.dll
- %PROGRAM_FILES%\ekanvod\date.dat
- %PROGRAM_FILES%\ekanvod\comdlg32.ocx
- %PROGRAM_FILES%\ekanvod\cfg.xml
- %TEMP%\RGI13.tmp
- %TEMP%\RGI12.tmp
- %TEMP%\RGI11.tmp
- %PROGRAM_FILES%\ekanvod\EkanvodService.exe
- %TEMP%\RGI15.tmp
- %TEMP%\RGI14.tmp
- %TEMP%\RGI4.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\open.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\next.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\mute2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\pre.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\play.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\pause.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\volumep.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\volumeb.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\volume.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\mute.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\info.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\back.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Lang\en_US.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\Lang\zh_TW.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\volumep.bmp
- %TEMP%\RGI3.tmp
- <SYSTEM32>\pncrt.dll
- %PROGRAM_FILES%\ekanvod\Qvod\AddIn\VisLrc.dll
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\progress_thumb.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\progress.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\processp.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\volumeb.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\volume.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\MiNi\progressd.bmp
- %TEMP%\RGI1B.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\QvodCfg.ini
- %PROGRAM_FILES%\ekanvod\Qvod\Qvod.cfg.tmp
- %TEMP%\RGI1E.tmp
- %TEMP%\RGI1D.tmp
- %TEMP%\RGI1C.tmp
- %TEMP%\RGI18.tmp
- %TEMP%\RGI17.tmp
- %PROGRAM_FILES%\ekanvod\uninst.exe
- %TEMP%\RGI1A.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\QvodPlayer.xml
- %TEMP%\RGI19.tmp
- %TEMP%\RGI26.tmp
- %TEMP%\RGI25.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\Favorite\Desktop.ini
- %TEMP%\RGI29.tmp
- %TEMP%\RGI28.tmp
- %TEMP%\RGI27.tmp
- %TEMP%\RGI21.tmp
- %TEMP%\RGI20.tmp
- %TEMP%\RGI1F.tmp
- %TEMP%\RGI24.tmp
- %TEMP%\RGI23.tmp
- %TEMP%\RGI22.tmp
- %PROGRAM_FILES%\ekanvod\App.ini
- %PROGRAM_FILES%\ekanvod\uninstall.dat
- %PROGRAM_FILES%\ekanvod\unins000.dat
- %PROGRAM_FILES%\ekanvod\taobao.ico
- %PROGRAM_FILES%\ekanvod\МФ±¦Нш.url
- %PROGRAM_FILES%\ekanvod\youku.ico
- %PROGRAM_FILES%\ekanvod\update.exe
- %PROGRAM_FILES%\ekanvod\Qvod\Qvod.cfg
- %PROGRAM_FILES%\ekanvod\ekplay.exe
- %PROGRAM_FILES%\ekanvod\date_f.dat
- %PROGRAM_FILES%\ekanvod\msscript.ocx
- %PROGRAM_FILES%\ekanvod\i.gif
- %PROGRAM_FILES%\ekanvod\f.htm
- %HOMEPATH%\Start Menu\Programs\ТЧїґёЯЗеІҐ·ЕЖч\ТЧїґёЯЗеІҐ·ЕЖч.lnk
- %HOMEPATH%\Desktop\ТЧїґёЯЗеІҐ·ЕЖч.lnk
- %HOMEPATH%\Desktop\МФ±¦МШВф.lnk
- %TEMP%\nsr16.tmp\System.dll
- %HOMEPATH%\Start Menu\Programs\ТЧїґёЯЗеІҐ·ЕЖч\ТЧїґёЯЗеІҐ·ЕЖчР¶ФШ.lnk
- %PROGRAM_FILES%\ekanvod\ТЧїґёЯЗеІҐ·ЕЖч.url
- %PROGRAM_FILES%\ekanvod\Mod\MMCShell.dll
- %PROGRAM_FILES%\ekanvod\Mod\CCTVUpdateInstall.dll
- %PROGRAM_FILES%\ekanvod\ФЪПЯёЯЗеУ°Фє.url
- %HOMEPATH%\Desktop\ФЪПЯёЯЗеУ°Фє.lnk
- %WINDIR%\taobao.ico
- %WINDIR%\youku.ico
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\left.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\infofull.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\info.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\listbutton2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\listbutton.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\left1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\caption.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bright1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bottomright.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\icon.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\full.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\close.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_files_2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_files.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_del.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_search.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_info.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_fill.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\lsearchb2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\lsearchb1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\listsplit.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\max.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\lsearchbg1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\lsearchbg.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bottomleft.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\ColorFilter.ax.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\RealMediaSplitter.ax.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\asfsplliter.ax.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\raac.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\drvc.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\cook.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\QvodTerminal.exe
- %PROGRAM_FILES%\ekanvod\Qvod\QvodInit.exe
- %TEMP%\nsk2.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\QvodInsert.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\NetAgent.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\QvodPlayer.exe
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\backright.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\backmid.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\backleft.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bottom.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bleft1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\bgline.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default.xml
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\f4v.swf.new
- %PROGRAM_FILES%\ekanvod\Qvod\Codecs\atrc.dll.new
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\back.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Mini.xml
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Logo.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_up.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_right.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_limit_h.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\stop.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\search_icon.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\search_botton.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_back_h.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_back.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\right1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_limit.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_left.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\scroll_down.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\topleft.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\top.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tabs_search_left.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\topright1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\topright.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\topleft1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tabs_fill.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tab1.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tab.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tabs_search_fill.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tabs_right.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\tabs_mid.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\right.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mtk.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\min.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\menu.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\next.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mute2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mute.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mediaeditdel.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_sham_2.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\media_sham.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mediatree.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mediatolist.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\mediare.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\progress_point_a.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\progress.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\processp.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\reold.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\progress_thumb.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\progress_point_b.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\pause.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\open.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\nowplay.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\pre.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\playlist_toolbar.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Skin\Default\play.bmp
- %PROGRAM_FILES%\ekanvod\Qvod\Favorite\Desktop.ini
- %TEMP%\RGI1D.tmp
- %TEMP%\RGI1C.tmp
- %TEMP%\RGI1F.tmp
- %TEMP%\RGI1E.tmp
- %TEMP%\RGI1B.tmp
- %TEMP%\RGI19.tmp
- %TEMP%\RGI18.tmp
- %TEMP%\RGI1A.tmp
- %PROGRAM_FILES%\ekanvod\Qvod\Qvod.cfg
- %TEMP%\RGI20.tmp
- %TEMP%\RGI27.tmp
- %TEMP%\RGI26.tmp
- %TEMP%\RGI29.tmp
- %TEMP%\RGI28.tmp
- %TEMP%\RGI25.tmp
- %TEMP%\RGI22.tmp
- %TEMP%\RGI21.tmp
- %TEMP%\RGI24.tmp
- %TEMP%\RGI23.tmp
- %TEMP%\RGI17.tmp
- %TEMP%\RGI9.tmp
- %TEMP%\RGI8.tmp
- %TEMP%\RGIB.tmp
- %TEMP%\RGIA.tmp
- %TEMP%\RGI7.tmp
- %TEMP%\RGI4.tmp
- %TEMP%\RGI3.tmp
- %TEMP%\RGI6.tmp
- %TEMP%\RGI5.tmp
- %TEMP%\RGIC.tmp
- %TEMP%\RGI13.tmp
- %TEMP%\RGI12.tmp
- %TEMP%\RGI15.tmp
- %TEMP%\RGI14.tmp
- %TEMP%\RGI11.tmp
- %TEMP%\RGIE.tmp
- %TEMP%\RGID.tmp
- %TEMP%\RGI10.tmp
- %TEMP%\RGIF.tmp
- 'localhost':1044
- 'h.##213.com':369
- 'tj.##anvod.com':83
- 'ag###.qvod.com':80
- 'in####-ad.xxxx.com':80
- 'up###e.xxxx.com':80
- 'localhost':8081
- up###e.xxxx.com/agent.cfg
- in####-ad.xxxx.com/admovie.cfg
- DNS ASK in####-ad.xxxx.com
- DNS ASK tj.##anvod.com
- DNS ASK up###e.xxxx.com
- DNS ASK h.##213.com
- DNS ASK ag###.qvod.com
- DNS ASK tj.#vod.com
- DNS ASK tr###.qvod.com
- DNS ASK st##.qvod.com
- DNS ASK st####.sipphone.com
- '<Private IP address>':1900
- 'tr###.qvod.com':80
- 'st##.qvod.com':3478
- 'st####.sipphone.com':3478
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Qvod Terminal' WindowName: 'Qvod Terminal'
- ClassName: 'QVODPLAYERCLASS' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''