Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'run' = '%WINDIR%\system\nwiz.exe'
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"%WINDIR%\system\nwiz.exe" -noconnect'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"%WINDIR%\system\nwiz.exe" -noconnect'
- %WINDIR%\system\nwiz.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- %WINDIR%\system\dlls\src\wTaskBar.dof
- %WINDIR%\system\dlls\src\wTaskBar.dpr
- %WINDIR%\system\UP.DLL
- %WINDIR%\system\dlls\src\wTaskBar.cfg
- %WINDIR%\system\ident.txt
- %WINDIR%\system\TMP1.$$$
- %WINDIR%\system\dlls\TaskBar.dll
- %WINDIR%\system\DEHELP.DLL
- %WINDIR%\system\Mirc.ini
- %WINDIR%\system\nick.txt
- %WINDIR%\system\kanal.txt
- %WINDIR%\system\Master.txt
- %WINDIR%\system\site.txt
- %WINDIR%\system\system.dll
- %WINDIR%\system\nwiz.exe
- %WINDIR%\system\remote.ini
- %WINDIR%\system\UP.DLL
- %WINDIR%\system\DEHELP.DLL
- %WINDIR%\system\nwiz.exe
- %WINDIR%\system\system.dll
- %WINDIR%\system\TMP1.$$$
- 'ir#.#urna.net':6667
- DNS ASK ir#.#urna.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''