Техническая информация
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"<SYSTEM32>\iceshock.exe" -noconnect'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"<SYSTEM32>\iceshock.exe" -noconnect'
- <SYSTEM32>\iceshock.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- <SYSTEM32>\LigTv Izle!_1.ico
- <SYSTEM32>\mirc.ini
- <SYSTEM32>\iceshock.exe
- <SYSTEM32>\fn.xt
- <SYSTEM32>\fuckers.jpg
- <SYSTEM32>\nHTMLn_2.95.dll
- <SYSTEM32>\Thumbs.db
- <SYSTEM32>\win.ini
- <SYSTEM32>\sysingB32.dll
- <SYSTEM32>\remote.ini
- <SYSTEM32>\server.dll
- <SYSTEM32>\email.txt
- <SYSTEM32>\1896.reg
- <SYSTEM32>\591.reg
- <SYSTEM32>\1855.reg
- <SYSTEM32>\1156.reg
- <SYSTEM32>\167.reg
- <SYSTEM32>\773.reg
- <SYSTEM32>\demo.xt
- <SYSTEM32>\download\load.exe
- <SYSTEM32>\Chans.dll
- <SYSTEM32>\790.reg
- <SYSTEM32>\791.reg
- <SYSTEM32>\Thumbs.db
- 'am####oyim.co.cc':6667
- DNS ASK am####oyim.co.cc
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''