Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- <SYSTEM32>\tskill.exe /A nv*
- <SYSTEM32>\tskill.exe /A nav*
- <SYSTEM32>\tskill.exe /A OUTPOST
- <SYSTEM32>\tskill.exe /A ZONEALARM
- <SYSTEM32>\tskill.exe /A SAFEWEB
- <SYSTEM32>\tskill.exe /A F-*
- <SYSTEM32>\tskill.exe /A def*
- <SYSTEM32>\tskill.exe /A kav
- <SYSTEM32>\tskill.exe /A BLACKICE
- <SYSTEM32>\tskill.exe /A ESAFE
- <SYSTEM32>\tskill.exe /A cle
- <SYSTEM32>\netsh.exe firewall set opmode mode=disable
- <SYSTEM32>\tskill.exe /A av*
- <SYSTEM32>\net1.exe stop УSecurity CenterФ
- <SYSTEM32>\attrib.exe +h %TEMP%\ztmp
- <SYSTEM32>\net.exe stop УSecurity CenterФ
- <SYSTEM32>\tskill.exe /A fire*
- <SYSTEM32>\tskill.exe /A PersFw
- <SYSTEM32>\tskill.exe /A KAV*
- <SYSTEM32>\tskill.exe /A bullguard
- <SYSTEM32>\tskill.exe /A anti*
- <SYSTEM32>\tskill.exe /A spy*
- firefox.exe
- AVSYNMGR.EXE
- AVPM.EXE
- NAVAPW32.EXE
- outpost.exe
- ZONEALARM.EXE
- AVPCC.EXE
- AVGCTRL.EXE
- AVGCC32.EXE
- avgcc.exe
- AVP32.EXE
- AVP.EXE
- AVP.COM
- %TEMP%\ztmp\tmp21661.exe
- %TEMP%\ztmp\tmp63231.bat