Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NashWall' = '%PROGRAM_FILES%\nashsoft\nashwall\nashwall.exe'
- hidden files
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000000'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoFolderOptions' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoControlPanel' = '00000000'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoControlPanel' = '00000000'
- %PROGRAM_FILES%\nashsoft\NashWall\nashwall
- %TEMP%\NashWall.Log
- from %PROGRAM_FILES%\nashsoft\NashWall\nashwall to %PROGRAM_FILES%\nashsoft\NashWall\nashwall.exe
- 'www.na###all.com':80
- '12#.#66.47.227':9009
- http://www.Na###all.com/NashNew/NashWall.txt via www.na###all.com
- DNS ASK www.na###all.com
- DNS ASK 22#.##.#66.122.in-addr.arpa
- '12#.#66.47.227':110
- ClassName: 'Shell_TrayWnd' WindowName: ''