Technical Information
- [<HKCU>\software\microsoft\windows\currentversion\Run] 'zmIRC' = '%APPDATA%\zmIRC\zmIRC.exe'
- %TEMP%\32657279.tmp
- %TEMP%\7a727546.tmp
- %TEMP%\37335869.tmp
- %TEMP%\6c42757a.tmp
- %TEMP%\45485632.tmp
- %TEMP%\744f4c48.tmp
- %TEMP%\16b4.tmp
- %TEMP%\f4f.tmp
- %APPDATA%\zmirc\zmirc.exe