Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NashWall' = '%PROGRAM_FILES%\nashsoft\nashwall\nashwall.exe'
- скрытых файлов
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000000'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoFolderOptions' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoControlPanel' = '00000000'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoControlPanel' = '00000000'
- %PROGRAM_FILES%\nashsoft\NashWall\nashwall
- %TEMP%\NashWall.Log
- %PROGRAM_FILES%\nashsoft\NashWall\nashwall в %PROGRAM_FILES%\nashsoft\NashWall\nashwall.exe
- 'www.na###all.com':80
- '12#.#66.47.227':9009
- www.na###all.com/NashNew/NashWall.txt
- DNS ASK www.na###all.com
- DNS ASK 22#.##.#66.122.in-addr.arpa
- '12#.#66.47.227':110
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'