Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'foffice' = 'nm.exe'
- <SYSTEM32>\nm.exe
- outpost.exe
- ZONEALARM.EXE
- [<HKCU>\Software\Far\Plugins\FTP\Hosts]
- [<HKCU>\SOFTWARE\Mirabilis\ICQ\NewOwners]
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- [<HKLM>\SOFTWARE\Miranda]
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKLM>\Software\Ghisler\Total Commander]
- <SYSTEM32>\nm.exe
- '94.##0.191.201':25
- DNS ASK sm##.mail.ru