Техническая информация
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"%WINDIR%\bn1\mirc.exe" -noconnect'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"%WINDIR%\bn1\mirc.exe" -noconnect'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'm' = '%WINDIR%\bn1\starter.exe'
- '%WINDIR%\bn1\mirc.exe'
- '%WINDIR%\bn1\starter.exe'
- '<Текущая директория>\starter.exe'
- '%WINDIR%\msagent\agentsvr.exe' -Embedding
- '%WINDIR%\regedit.exe' /s _1.reg
- %WINDIR%\bn1\servers.ini
- %WINDIR%\bn1\script.ini
- %WINDIR%\bn1\remote.ini
- %WINDIR%\bn1\_1.reg
- %WINDIR%\bn1\starter.exe
- %WINDIR%\bn1\sget10.mrc
- %WINDIR%\bn1\popups.ini
- %WINDIR%\bn1\aliases.ini
- %WINDIR%\bn1\sysinfo.mrc
- <Текущая директория>\starter.exe
- %WINDIR%\bn1\nHTMLn_2.95.dll
- %WINDIR%\bn1\mirc.ini
- %WINDIR%\bn1\mirc.exe
- %WINDIR%\bn1\_1.reg
- 'el###.sytes.net':6667
- DNS ASK el###.sytes.net
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
- ClassName: 'mIRC' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'