Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'esexi' = '<SYSTEM32>\IENet.exe'
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"<SYSTEM32>\iexplorer.exe"'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"<SYSTEM32>\iexplorer.exe"'
- <SYSTEM32>\IEXPLORER.EXE
- <SYSTEM32>\IENet.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- %WINDIR%\regedit.exe /s meshal.reg
- %WINDIR%\real Uninstaller.exe
- <SYSTEM32>\servers.ini
- <SYSTEM32>\remote.ini
- <SYSTEM32>\TMP1.$$$
- <SYSTEM32>\meshal.reg
- %HOMEPATH%\Start Menu\Programs\real\Uninstall real.lnk
- <SYSTEM32>\IENet.exe
- <SYSTEM32>\Config.JB
- %TEMP%\aiw122906.EXE
- <SYSTEM32>\mirc.ini
- <SYSTEM32>\IEXPLORER.EXE
- <SYSTEM32>\IEXPLORER.CTX
- <SYSTEM32>\IEXPLORER.EXE
- <SYSTEM32>\servers.ini
- <SYSTEM32>\IENet.exe
- <SYSTEM32>\IEXPLORER.CTX
- <SYSTEM32>\meshal.reg
- <SYSTEM32>\TMP2.$$$
- %TEMP%\aiw122906.EXE
- 'ir#.dal.net':6667
- DNS ASK ir#.Dal.net
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''