Technical Information
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'hndclient' = '<Full path to file>'
- Windows Task Manager (Taskmgr)
- %ALLUSERSPROFILE%\handycafe\client\data\sets.ini
- <Current directory>\language\lng.ini
- %ALLUSERSPROFILE%\handycafe\client\dump.log
- %ALLUSERSPROFILE%\handycafe\client\data\data.dat
- %ALLUSERSPROFILE%\handycafe\client\qeonsn_list.dat
- http://ad.###dycafe.com/se/adx.php
- DNS ASK ad.###dycafe.com
- ClassName: '_cupclass' WindowName: ''
- ClassName: 'Progman' WindowName: ''
- ClassName: 'TfrmOnline' WindowName: 'HandyCafe Client'
- ClassName: 'TfrmMessage' WindowName: ''
- ClassName: '_today' WindowName: ''
- ClassName: 'TfrmCafe' WindowName: ''
- ClassName: 'hndpop' WindowName: ''
- ClassName: 'TfrmChangePass' WindowName: ''
- ClassName: 'TfrmSettings' WindowName: 'Options'
- ClassName: 'TfrmWait' WindowName: 'HandyCafe Client'
- ClassName: '_guard_' WindowName: 'Guardit'