Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\ezlg] 'Start' = '00000000'
- [<HKLM>\System\CurrentControlSet\Services\ezlg] 'ImagePath' = 'system32\drivers\sxr.sys'
- 'ezlg' <DRIVERS>\sxr.sys
- %APPDATA%\microsoft\internet explorer\quick launch\æô¶¯ internet explorer ä¯à à æ÷.lnk
- %HOMEPATH%\favorites\Гøö·µ¼º½.url
- %WINDIR%\syswow64\njh.dll
- %WINDIR%\syswow64\drivers\sxr.sys
- %WINDIR%\syswow64\c1fi7j.bat
- nul
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\C1fI7j.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c <SYSTEM32>\C1fI7j.bat
- '%WINDIR%\syswow64\ping.exe' -n 3 127.0.0.1