Technical Information
- %WINDIR%\IFinst27.exe -I<Full path to virus>
- %TEMP%\_if1.tmp
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %WINDIR%\IFinst27.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'IFBG' WindowName: '???????? 3???? ???? ???? _?? By??[????]???? ????'