Техническая информация
- [<HKLM>\SOFTWARE\Classes\irc\Shell\open\command] '' = '"%WINDIR%\security\Mirc.exe" -noconnect'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"%WINDIR%\security\Mirc.exe" -noconnect'
- %WINDIR%\security\Mirc.exe Mirc.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- %WINDIR%\security\nick.txt
- %WINDIR%\security\Mirc.ini
- %WINDIR%\security\up.reg
- %WINDIR%\security\Sfwwin32.dll
- %TEMP%\ci0-temp\Ahmet.set
- %TEMP%\gert0.dll
- %WINDIR%\security\Mirc.exe
- %WINDIR%\security\bear.txt
- %WINDIR%\security\up.reg
- %WINDIR%\security\Sfwwin32.dll
- %WINDIR%\security\nick.txt
- %TEMP%\gert0.dll
- %TEMP%\ci0-temp\Ahmet.set
- ClassName: 'Shell_TrayWnd' WindowName: ''