Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'foffice' = 'nm.exe'
- '<SYSTEM32>\nm.exe'
- outpost.exe
- ZONEALARM.EXE
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- [<HKCU>\SOFTWARE\Mirabilis\ICQ\NewOwners]
- [<HKCU>\Software\RIT\The Bat!]
- [<HKCU>\Software\Microsoft\Internet Account Manager\Accounts]
- [<HKLM>\Software\Ghisler\Total Commander]
- [<HKCU>\Software\RimArts\B2\Settings]
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKLM>\SOFTWARE\Miranda]
- <SYSTEM32>\nm.exe
- '94.##0.191.201':25
- DNS ASK ma#l.ru