Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\smfchu] 'Start' = '00000000'
- [<HKLM>\System\CurrentControlSet\Services\smfchu] 'ImagePath' = 'system32\drivers\wxrw.sys'
- %APPDATA%\microsoft\internet explorer\quick launch\æô¶¯ internet explorer ä¯à à æ÷.lnk
- %HOMEPATH%\favorites\Гøö·µ¼º½.url
- %WINDIR%\syswow64\rkrpguq.dll
- %WINDIR%\syswow64\drivers\wxrw.sys
- %WINDIR%\syswow64\3elfuy.bat
- nul
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\3ELFuY.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\3ELFuY.bat
- '%WINDIR%\syswow64\ping.exe' -n 3 127.0.0.1