Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\Sysagent2.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\Sysagent.lnk
- [<HKLM>\SYSTEM\ControlSet001\Services\SystemRunner] 'ImagePath' = '"%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\nssm.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\SystemRunner] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' start SystemRunner
- '%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\nssm.exe' install SystemRunner "%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\SystemRunner.exe"
- '%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\SystemRunner.exe'
- '%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\nssm.exe'
- '<SYSTEM32>\xcopy.exe' /y "%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\*.Lnk*" "%ALLUSERSPROFILE%\Start Menu\Programs\Startup\"
- '%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\run.exe'
- '%ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\systemConfig2.exe'
- '<SYSTEM32>\xcopy.exe' /y "\Avira\Avira Security Management Center Agent\Sysagent\*.Lnk*" "%ALLUSERSPROFILE%\Start Menu\Programs\Startup\"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\run.bat" "
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\nssm.exe
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\Sysagent2.lnk
- C:\Documents and Settings\LocalService\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
- %TEMP%\1.tmp\run.bat
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\Sysagent.lnk
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\systemConfig2.exe
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\rcimage_150.ico
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\run.exe
- %ProgramFiles%\Avira\Avira Security Management Center Agent\Sysagent\SystemRunner.exe
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''