Technical Information
- [<HKLM>\SOFTWARE\Classes\timeleftau\shell\open\command] '' = '<Full path to file> %1'
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{21196042-830F-419f-A594-F9D456A6C29A}] 'ClsidExtension' = '{21196042-830F-419f-A594-F9D456A6C29A}'
- [<HKCU>\Software\Microsoft\Internet Explorer\Extensions\{21196042-830F-419f-A594-F9D456A6C29A}] 'Script' = '<Current directory>\TLIntergIE.html'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' http://www.ne###rsoft.com/welcome/welcome.php?wv##################################
- %APPDATA%\NesterSoft\TimeLeft\Log\system.txt
- %APPDATA%\NesterSoft\TimeLeft\Log\notify.txt
- %APPDATA%\NesterSoft\TimeLeft\we.url
- %APPDATA%\NesterSoft\TimeLeft\instname.txt
- %APPDATA%\NesterSoft\TimeLeft\tl.ini
- 'localhost':1036
- 'ne###rsoft.com':80
- http://www.ne###rsoft.com/welcome/welcome.php?wv################################## via ne###rsoft.com
- DNS ASK www.ne###rsoft.com
- ClassName: '' WindowName: 'TimeLeft3Main'
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''