root@fusty# strings setup.exe !This program cannot be run in DOS mode. Rich .data .idata .reloc iamcool cawk #evilnull files.serveftp.net mIRC v6.15 Khaled Mardam-Bey null StubPath Software\Microsoft\Active Setup\Installed Components\{2ea876c0-b39l-31f1-2950-13d43e52abf9} \explorer.exe %s %s %s %s :%s Name: %s, User: %s, OS: %d.%d IP: %d.%d.%d.%d Uptime: %s %dD %dH %dM %dS error downloading. error executing. %s executed. open logged in JOIN %s %s KICK VERSION %s VERSION NOTICE PING %s PING PONG PING PRIVMSG NICK %s USER %s 0 0 :%s JOIN %s %s %s%i shell32 urlmon wsock32 user32.dll kernel32.dll http\shell\open\command DSVW Y_^[ YYhL Y_^[ @SVW XSVW KERNEL32.DLL ADVAPI32.dll MSVCRT.dll SHELL32.dll urlmon.dll WSOCK32.dll GetTickCount GetComputerNameA GetVersionExA LoadLibraryA CloseHandle CreateRemoteThread DeleteFileA VirtualAllocEx VirtualFreeEx GetModuleHandleA OpenProcess CreateProcessA GetExitCodeProcess ExitProcess GetSystemDirectoryA lstrcatA GetModuleFileNameA CopyFileA WriteProcessMemory RegQueryValueExA GetUserNameA RegDeleteKeyA RegCreateKeyA RegSetValueExA RegCloseKey strcpy srand memset _chkesp strlen sprintf strcmp strtok rand ShellExecuteA URLDownloadToFileA root@fusty#