It modifies the following registry entries to ensure it automatic execution at every system startup: This worm adds the following registry entries to enable its automatic execution at every system startup:Įxplorer = "%System%\drivers\TXPlatform.exe"
(Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, or C:\Windows\System32 on Windows XP and Server 2003.) It drops the following copies of itself into the affected system: %Program Files% is the default Program Files folder, usually C:\Program Files.) It is also where the operating system is located.
(Note: %System Root% is the root folder, which is usually C:\. Payload: Connects to URLs/IPs, Terminates processes
0 kommentar(er)
