Техническая информация
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"<SYSTEM32>\explorer.exe"'
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"<SYSTEM32>\explorer.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'taskmgr' = 'C:\WINNT\system32\explorer.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IExplorer' = '<SYSTEM32>\explorer.exe'
- <SYSTEM32>\explorer.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- %WINDIR%\regedit.exe /s sup.reg
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\sup.bat" "
- <SYSTEM32>\sup.reg
- <SYSTEM32>\sup.bat
- <SYSTEM32>\users.ini
- <SYSTEM32>\explorer.exe
- <SYSTEM32>\TMP1.$$$
- <SYSTEM32>\TMP4.$$$
- <SYSTEM32>\remote.ini
- <SYSTEM32>\TMP2.$$$
- <SYSTEM32>\TMP3.$$$
- <SYSTEM32>\control.ini
- <SYSTEM32>\fullnames.txt
- <SYSTEM32>\aliases.ini
- <SYSTEM32>\ccc.mrc
- <SYSTEM32>\idents.txt
- <SYSTEM32>\postcard.gif
- <SYSTEM32>\servers.ini
- <SYSTEM32>\mirc.ico
- <SYSTEM32>\mirc.ini
- <SYSTEM32>\users.ini
- <SYSTEM32>\servers.ini
- <SYSTEM32>\remote.ini
- <SYSTEM32>\explorer.exe
- <SYSTEM32>\control.ini
- <SYSTEM32>\aliases.ini
- <SYSTEM32>\mirc.ini
- <SYSTEM32>\mirc.ico
- <SYSTEM32>\TMP3.$$$
- <SYSTEM32>\TMP4.$$$
- <SYSTEM32>\TMP1.$$$
- <SYSTEM32>\TMP2.$$$
- 'ta###.##.us.undernet.org':6667
- 'x.##ils.in':80
- DNS ASK Ta###.##.US.Undernet.Org
- DNS ASK x.##ils.in
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''