Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- %TEMP%\gjrd3180GJ2.exe
- %TEMP%\gjrd3180GJ1.exe
- <SYSTEM32>\tskill.exe /A bullguard
- <SYSTEM32>\tskill.exe /A spy*
- <SYSTEM32>\tskill.exe /A anti*
- <SYSTEM32>\tskill.exe /A ZONEALARM
- <SYSTEM32>\tskill.exe /A KAV*
- <SYSTEM32>\tskill.exe /A PersFw
- <SYSTEM32>\net1.exe stop УSecurity CenterФ
- <SYSTEM32>\net.exe stop УSecurity CenterФ
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\AVKiller.bat" "
- <SYSTEM32>\tskill.exe /A fire*
- <SYSTEM32>\tskill.exe /A av*
- <SYSTEM32>\netsh.exe firewall set opmode mode=disable
- AVPM.EXE
- AVPCC.EXE
- AVSYNMGR.EXE
- ZONEALARM.EXE
- firefox.exe
- AVP32.EXE
- AVGCC32.EXE
- avgcc.exe
- AVGCTRL.EXE
- AVP.EXE
- AVP.COM
- %TEMP%\1.tmp\AVKiller.bat
- %TEMP%\gjrd3180GJ1.exe
- %TEMP%\gjrd3180GJ2.exe