Техническая информация
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"%PROGRAM_FILES%\Internet Explorer\SVICHOST.exe" -noconnect'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"%PROGRAM_FILES%\Internet Explorer\SVICHOST.exe" -noconnect'
- '%PROGRAM_FILES%\Internet Explorer\SVICHOST.exe' SVICHOST.exe
- '%WINDIR%\webs.exe'
- '%WINDIR%\msagent\agentsvr.exe' -Embedding
- %PROGRAM_FILES%\Internet Explorer\Sfwwin32.dll
- %PROGRAM_FILES%\Internet Explorer\mIRC.ini
- %PROGRAM_FILES%\Internet Explorer\sysingB32.dll
- %PROGRAM_FILES%\Internet Explorer\SVICHOST.exe
- %PROGRAM_FILES%\Internet Explorer\fn.xt
- %TEMP%\gert0.dll
- %WINDIR%\webs.exe
- %PROGRAM_FILES%\Internet Explorer\final.com
- %TEMP%\ci0-temp\Ahmet.set
- %TEMP%\gert0.dll
- %TEMP%\ci0-temp\Ahmet.set
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'