Technical Information
- [HKLM\SOFTWARE\Classes\htmlfile\shell\open\command] '' = '"%ProgramFiles%\NetBarIE\txwbie.exe" "%1"'
- [HKLM\SOFTWARE\Classes\HTTP\shell\open\command] '' = '"%ProgramFiles%\NetBarIE\txwbie.exe" "%1"'
- [HKLM\SOFTWARE\Classes\https\shell\open\command] '' = '"%ProgramFiles%\NetBarIE\txwbie.exe" "%1"'
- D:\backup\x-ps.exe
- %ProgramFiles(x86)%\netbarie\image\safe.ico
- %ProgramFiles(x86)%\netbarie\image\safecheck.ico
- %ProgramFiles(x86)%\netbarie\image\save.ico
- %ProgramFiles(x86)%\netbarie\image\search.ico
- %ProgramFiles(x86)%\netbarie\image\search.png
- %ProgramFiles(x86)%\netbarie\image\shot.ico
- %ProgramFiles(x86)%\netbarie\image\skin.ico
- %ProgramFiles(x86)%\netbarie\image\split_screen.ico
- %ProgramFiles(x86)%\netbarie\image\nopop.ico
- %ProgramFiles(x86)%\netbarie\image\startlogo.gif
- %ProgramFiles(x86)%\netbarie\image\stop.ico
- %ProgramFiles(x86)%\netbarie\image\tango.ico
- %ProgramFiles(x86)%\netbarie\image\uncheck.ico
- %ProgramFiles(x86)%\netbarie\image\unknow.ico
- %ProgramFiles(x86)%\netbarie\image\user.ico
- %ProgramFiles(x86)%\netbarie\image\zoom.ico
- %ProgramFiles(x86)%\netbarie\plugin\外部程序\tgplug.ico
- %ProgramFiles(x86)%\netbarie\plugin\外部程序\tgplug.ini
- %ProgramFiles(x86)%\netbarie\image\qiantai2.ico
- %ProgramFiles(x86)%\netbarie\image\refresh.ico
- %ProgramFiles(x86)%\netbarie\image\qiantai.ico
- %ProgramFiles(x86)%\netbarie\image\private2.ico
- %ProgramFiles(x86)%\netbarie\image\private.ico
- %ProgramFiles(x86)%\netbarie\image\msgpop.ico
- %ProgramFiles(x86)%\netbarie\image\newpage.ico
- %ProgramFiles(x86)%\netbarie\image\nocheck.ico
- %ProgramFiles(x86)%\netbarie\image\noflash.ico
- %ProgramFiles(x86)%\netbarie\image\noflash2.ico
- %ProgramFiles(x86)%\netbarie\image\nofloat.ico
- %ProgramFiles(x86)%\netbarie\image\nofloat2.ico
- %ProgramFiles(x86)%\netbarie\image\nopic.ico
- %ProgramFiles(x86)%\netbarie\plugin\清除记录\tgplug.ico
- %ProgramFiles(x86)%\netbarie\image\statistics.ico
- %ProgramFiles(x86)%\netbarie\image\nopic2.ico
- %ProgramFiles(x86)%\netbarie\image\openfolder.ico
- %ProgramFiles(x86)%\netbarie\image\openlink.ico
- %ProgramFiles(x86)%\netbarie\image\openlink2.ico
- %ProgramFiles(x86)%\netbarie\image\pagefind.ico
- %ProgramFiles(x86)%\netbarie\image\page_world.ico
- %ProgramFiles(x86)%\netbarie\image\page_zoom.ico
- %ProgramFiles(x86)%\netbarie\image\paste.ico
- %ProgramFiles(x86)%\netbarie\image\print.ico
- %ProgramFiles(x86)%\netbarie\image\lock.ico
- %ProgramFiles(x86)%\netbarie\image\nopop2.ico
- %ProgramFiles(x86)%\netbarie\plugin\清除记录\tgplug.ini
- %ProgramFiles(x86)%\netbarie\plugin\自动填表\tgplug.ico
- %ProgramFiles(x86)%\netbarie\plugin\自动填表\tgplug.ini
- %ProgramFiles(x86)%\netbarie\favorites3.txt
- %ProgramFiles(x86)%\netbarie\initsafesites.txt
- %ProgramFiles(x86)%\netbarie\initsearcheng.txt
- %ProgramFiles(x86)%\netbarie\inittgfilter.txt
- %ProgramFiles(x86)%\netbarie\inittoolbarurls.txt
- %ProgramFiles(x86)%\netbarie\initwebguide.txt
- %ProgramFiles(x86)%\netbarie\keywords.txt
- %ProgramFiles(x86)%\netbarie\lastopen.txt
- %ProgramFiles(x86)%\netbarie\mostvisited.txt
- %ProgramFiles(x86)%\netbarie\tango.ini
- %ProgramFiles(x86)%\netbarie\image\localfile.ico
- %ProgramFiles(x86)%\netbarie\tangoie.exe
- %ProgramFiles(x86)%\netbarie\user.ini
- %ProgramFiles(x86)%\netbarie\bin\cameradll.dll
- %ProgramFiles(x86)%\netbarie\bin\lame_enc.dll
- %ProgramFiles(x86)%\netbarie\bin\shdoclc.dll
- %ProgramFiles(x86)%\netbarie\bin\snapshot.exe
- %ProgramFiles(x86)%\netbarie\bin\tggdi2.dll
- %ProgramFiles(x86)%\netbarie\bin\tghistory.dll
- %ProgramFiles(x86)%\netbarie\bin\wmdll3.dll
- %ProgramFiles(x86)%\netbarie\custom.ini
- %ProgramFiles(x86)%\netbarie\webicon\www.2345.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\clearoption.txt
- %ProgramFiles(x86)%\netbarie\webicon\shared.ydstatic.com_images_favicon.ico
- %ProgramFiles(x86)%\netbarie\skin\ieskin.zip
- %ProgramFiles(x86)%\netbarie\tgmusic\playlist\player.ini
- %ProgramFiles(x86)%\netbarie\tgmusic\playlist\我的最爱.tpl
- %ProgramFiles(x86)%\netbarie\tgmusic\playlist\缺省播放列表.tpl
- %ProgramFiles(x86)%\netbarie\tgmusic\playlist\随机播放列表.tpl
- %ProgramFiles(x86)%\netbarie\tgmusic\playlist\随机播放列表.tsp
- %ProgramFiles(x86)%\netbarie\webicon\123.sogou.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\mat1.gtimg.com_www_icon_favicon2.ico
- %ProgramFiles(x86)%\netbarie\webicon\news.qq.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\ctc.qzonestyle.gtimg.cn_qzone_v6_img_favicon.ico_max_age=31536000
- %ProgramFiles(x86)%\netbarie\webicon\www.yahoo.com.cn_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.baidu.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.chinaiiss.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.google.cn_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.google.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.hao123.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.sogou.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.soso.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.taobao.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.yahoo.cn_favicon.ico
- %ProgramFiles(x86)%\netbarie\webicon\www.youdao.com_favicon.ico
- %ProgramFiles(x86)%\netbarie\searcheng.txt
- %ProgramFiles(x86)%\netbarie\image\ie.ico
- %ProgramFiles(x86)%\netbarie\image\favorites.ico
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_11.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_12.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_13.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_14.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_15.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_16.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_17.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_18.htm
- %ProgramFiles(x86)%\netbarie\doc\alexa.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_19.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_20.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_3.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_4.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_5.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_6.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_7.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_8.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_9.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_10.htm
- %ProgramFiles(x86)%\netbarie\doc\help_faq.htm
- %ProgramFiles(x86)%\netbarie\doc\help_9.htm
- %ProgramFiles(x86)%\netbarie\doc\help_7.htm
- D:\backup\client.vbs
- %ProgramFiles(x86)%\netbarie\f5.vbs
- %ProgramFiles(x86)%\netbarie\ie.bat
- %ProgramFiles(x86)%\netbarie\ie8.ico
- %ProgramFiles(x86)%\netbarie\ie.dll
- %ProgramFiles(x86)%\netbarie\run.vbs
- %ProgramFiles(x86)%\netbarie\tem.ini
- %ProgramFiles(x86)%\netbarie\x-ps.exe
- %ProgramFiles(x86)%\netbarie\doc\quick.htm
- %ProgramFiles(x86)%\netbarie\doc\jiqiao_2.htm
- %ProgramFiles(x86)%\netbarie\internet explorer.lnk
- %ProgramFiles(x86)%\netbarie\doc\help_1.htm
- %ProgramFiles(x86)%\netbarie\doc\help_10.htm
- %ProgramFiles(x86)%\netbarie\doc\help_11.htm
- %ProgramFiles(x86)%\netbarie\doc\help_12.htm
- %ProgramFiles(x86)%\netbarie\doc\help_13.htm
- %ProgramFiles(x86)%\netbarie\doc\help_2.htm
- %ProgramFiles(x86)%\netbarie\doc\help_3.htm
- %ProgramFiles(x86)%\netbarie\doc\help_5.htm
- D:\backup\a.bat
- %ProgramFiles(x86)%\netbarie\doc\all.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_2.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_3.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_4.htm
- %ProgramFiles(x86)%\netbarie\image\close.ico
- %ProgramFiles(x86)%\netbarie\image\closed.ico
- %ProgramFiles(x86)%\netbarie\image\copy.ico
- %ProgramFiles(x86)%\netbarie\image\cut.ico
- %ProgramFiles(x86)%\netbarie\image\danger.ico
- %ProgramFiles(x86)%\netbarie\image\date.ico
- %ProgramFiles(x86)%\netbarie\image\default.ico
- %ProgramFiles(x86)%\netbarie\image\encoding.ico
- %ProgramFiles(x86)%\netbarie\image\extendtool.ico
- %ProgramFiles(x86)%\netbarie\image\fillform.ico
- %ProgramFiles(x86)%\netbarie\image\home.ico
- %ProgramFiles(x86)%\netbarie\image\filter.ico
- %ProgramFiles(x86)%\netbarie\image\filterad.ico
- %ProgramFiles(x86)%\netbarie\image\filterad2.ico
- %ProgramFiles(x86)%\netbarie\image\find.ico
- %ProgramFiles(x86)%\netbarie\image\find_next.ico
- %ProgramFiles(x86)%\netbarie\image\find_prior.ico
- %ProgramFiles(x86)%\netbarie\image\folder.ico
- %ProgramFiles(x86)%\netbarie\image\font_size.ico
- %ProgramFiles(x86)%\netbarie\image\highlight.ico
- %ProgramFiles(x86)%\netbarie\image\clean.ico
- %ProgramFiles(x86)%\netbarie\doc\view_2.htm
- %ProgramFiles(x86)%\netbarie\image\catchhtml.ico
- %ProgramFiles(x86)%\netbarie\doc\view_12.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_5.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_6.htm
- %ProgramFiles(x86)%\netbarie\doc\quick_7.htm
- %ProgramFiles(x86)%\netbarie\doc\safe.htm
- %ProgramFiles(x86)%\netbarie\doc\tango.css
- %ProgramFiles(x86)%\netbarie\doc\tango2.css
- %ProgramFiles(x86)%\netbarie\doc\view.htm
- %ProgramFiles(x86)%\netbarie\doc\view_10.htm
- %ProgramFiles(x86)%\netbarie\doc\view_11.htm
- %ProgramFiles(x86)%\netbarie\image\history.ico
- %ProgramFiles(x86)%\netbarie\image\book.ico
- %ProgramFiles(x86)%\netbarie\doc\view_3.htm
- %ProgramFiles(x86)%\netbarie\doc\view_4.htm
- %ProgramFiles(x86)%\netbarie\doc\view_5.htm
- %ProgramFiles(x86)%\netbarie\doc\view_6.htm
- %ProgramFiles(x86)%\netbarie\doc\view_7.htm
- %ProgramFiles(x86)%\netbarie\doc\view_8.htm
- %ProgramFiles(x86)%\netbarie\doc\view_9.htm
- %ProgramFiles(x86)%\netbarie\image\ad_hunter.ico
- %ProgramFiles(x86)%\netbarie\image\alexa.ico
- %ProgramFiles(x86)%\netbarie\image\booko.ico
- %ProgramFiles(x86)%\netbarie\r.reg
- %ProgramFiles(x86)%\netbarie\r.reg
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- 'D:\backup\x-ps.exe'
- '%WINDIR%\syswow64\wscript.exe' "%ProgramFiles(x86)%\NetBarIE\Run.vbs"
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\NetBarIE\IE.bat" "' (with hidden window)
- '%WINDIR%\syswow64\regedit.exe' /s ie.dll' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\NetBarIE\IE.bat" "
- '%WINDIR%\syswow64\regini.exe' Tem.ini
- '%WINDIR%\syswow64\regedt32.exe' /s ie.dll
- '%WINDIR%\syswow64\regedit.exe' /s ie.dll
- '%WINDIR%\syswow64\regedit.exe' /S R.REG