Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\ixrb] 'Start' = '00000000'
- [<HKLM>\System\CurrentControlSet\Services\ixrb] 'ImagePath' = 'system32\drivers\wwi.sys'
- 'ixrb' <DRIVERS>\wwi.sys
- %APPDATA%\microsoft\internet explorer\quick launch\æô¶¯ internet explorer ä¯à à æ÷.lnk
- %HOMEPATH%\favorites\Гøö·µ¼º½.url
- %WINDIR%\syswow64\junjr.dll
- %WINDIR%\syswow64\drivers\wwi.sys
- %WINDIR%\syswow64\85e1oz.bat
- nul
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\85e1Oz.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\85e1Oz.bat
- '%WINDIR%\syswow64\ping.exe' -n 3 127.0.0.1