Техническая информация
Для обеспечения автозапуска и распространения
Создает следующие сервисы
- [<HKLM>\System\CurrentControlSet\Services\klnagent] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\klnagent] 'ImagePath' = '"%ProgramFiles(x86)%\Kaspersky Lab\NetworkAgent\klnagent.exe"'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\rarsfx0\klrbtagt.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_cn_t.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_du.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_ge.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_it.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_ko.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_pl.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_pt.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_sp.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_swe.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent800i_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\navp2004xp.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\navp2005.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\nis_2005.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\nod32.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norman.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_1000.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_1_394.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_1_5_5000.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscanent451_cn_s.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_2000.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan85ent.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan80ent.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kav_as_1.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kav_as_11.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kerio41pf.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kerio4pf.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kerio6wrfw.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kis303.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\lavasoftpfw10.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeeaspy.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeeaspy85.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeedf_80.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeeepoagent.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeefw40.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeefwplus7.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan45.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan70ent.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan70ent_de.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan71ent.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan71ent_de.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan71ent_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\mcafeevirusscan80ent_de.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_359.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_10_4000.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_761.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\viguard.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\zasuite_55.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\za_55.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\za_av_55.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\za_pro_55.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\za_ws_55.ini
- %WINDIR%\installer\$patchcache$\managed\5baa27c7d7a8288459c01a2fa649d93a\6.0.1591\global_vc_cpprt60_f0.51d569e3_8a28_11d2_b962_006097c4de24
- %WINDIR%\installer\$patchcache$\managed\5baa27c7d7a8288459c01a2fa649d93a\6.0.1591\global_vc_crt_f0.51d569e0_8a28_11d2_b962_006097c4de24
- %TEMP%\rarsfx0\setup.log
- %WINDIR%\installer\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\arpproducticon.exe
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_prodinfo.xml
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\events.ctrl
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\events_97774a9b-503f-49a1-9cd5-d361a4d2dc92.dat
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_runtime.xml
- %CommonProgramFiles(x86)%\kaspersky lab\data\e2s_subscription.xml
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\sspriv.dat
- %WINDIR%\temp\kleaner.log
- %WINDIR%\temp\5bd5aa8f-021c-43e7-aa4d-16468bb161b2.tmp
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\trend_pccill_is_2005.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\trend_pccill_is_2007.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\trendpccillas.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\trendmicroofscan.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\trendmicroantispy3.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_9.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_904.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost10.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost10sdk.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost21pro.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost25.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost26.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\outpost30.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kavpers50pron.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\pandawebav.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\pandais05.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\sophos21au.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\sophos46_9x.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\sophos4x.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\sophos6x5x.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\steganosiap7.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\symanteclu.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\symanteclu17.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\tiny6pro.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\norton_8.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\safensec.ini
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_settings.xml
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kavpers50pro.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\etrustezas05.ini
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setup.inx
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\isrt.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\isconfig.ini
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\_isres.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\_isuser.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\string2052.txt
- %TEMP%\msi641b.tmp
- %TEMP%\msi64f6.tmp
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\license.txt
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\klssinst.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\klssin9x.dll
- %TEMP%\msi6a18.tmp
- %TEMP%\msi6a67.tmp
- %TEMP%\6bcb.rra
- %TEMP%\nagent_log.txt
- C:\nagent_log.txt
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\ss_i6dcf.rra
- %ProgramFiles(x86)%\kaspersky lab\networkagent\cleanapi.dll
- %CommonProgramFiles(x86)%\kaspersky lab\em.dll
- %WINDIR%\downloaded installations\{e36633a7-0ab1-4646-9cc5-2437ce355e48}\0x0804.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\fssync.dll
- %WINDIR%\downloaded installations\{e36633a7-0ab1-4646-9cc5-2437ce355e48}\kaspersky network agent.msi
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\isrt.dll
- %TEMP%\rarsfx0\lsexec.exe
- %TEMP%\rarsfx0\setup.exe
- %TEMP%\rarsfx0\setup.iss
- %TEMP%\rarsfx0\ss_install.xml
- %TEMP%\rarsfx0\~ss_install.~xml~2
- %TEMP%\rarsfx0\klcfginst.exe
- %TEMP%\rarsfx0\klnagent.kpd
- %TEMP%\rarsfx0\klrbtagt.exe
- %TEMP%\~d21.tmp
- %TEMP%\_isd41\setup.ini
- %TEMP%\_isd41\_ismsidel.ini
- %TEMP%\_isd41\0x0804.ini
- %TEMP%\_isd41\kaspersky network agent.msi
- %TEMP%\_isd41\isscript.msi
- %WINDIR%\installer\101773.mst
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\idriver.exe
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\objps7.dll
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\iuser7.dll
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\iscript7.dll
- %CommonProgramFiles(x86)%\installshield\driver\7\intel 32\_isres1033.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcsagt.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcskca.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcsnagt.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\caetrustav71_1.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\caetrustitm80403.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\caetrustpestpatrol50.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\drweb430.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\drweb433.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\drwebcgplg.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\drwebfs.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\etrustarmonav.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kavlite45.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\etrustarmonfw.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\etrustezav05.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\fsecurewks.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\gdataavkit05.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\im_secure_pro.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kah15.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kah17.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kav303.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kav45.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\caetrustav70.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\caetrustav71.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender9st.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender9pp.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender8st_xp_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcsstd.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcstr.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klmover.exe
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klnagchk.exe
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klnagent.exe
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klnagloc.dll
- %CommonProgramFiles(x86)%\cisco systems\ciscotrustagent\plugins\install\klpplugin.dll
- %CommonProgramFiles(x86)%\cisco systems\ciscotrustagent\plugins\install\klpplugin.inf
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\kavpers5.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\libeay32.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klsecur2.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\ashampooav.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\ashampoofw.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\avp35.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender72st_xp_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender7pro_xp_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender8pp.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender8pro_xp_fr.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\cleaner\bitdefender8st.ini
- %ProgramFiles(x86)%\kaspersky lab\networkagent\klcsrt.dll
- %ProgramFiles(x86)%\kaspersky lab\networkagent\ssleay32.dll
- %ProgramFiles(x86)%\installshield installation information\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setu9fcc.rra
Удаляет следующие файлы
- %TEMP%\~d21.tmp
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\_isres.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\_isuser.dll
- %TEMP%\_isd41\setup.ini
- %TEMP%\_isd41\0x0804.ini
- %TEMP%\_isd41\kaspersky network agent.msi
- %TEMP%\_isd41\isscript.msi
- %TEMP%\_isd41\_ismsidel.ini
- %TEMP%\rarsfx0\klcfginst.exe
- %TEMP%\rarsfx0\klnagent.kpd
- %TEMP%\rarsfx0\klrbtagt.exe
- %TEMP%\rarsfx0\klrbtagt.ini
- %TEMP%\rarsfx0\lsexec.exe
- %TEMP%\rarsfx0\setup.exe
- %TEMP%\rarsfx0\setup.iss
- %TEMP%\rarsfx0\setup.log
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\string2052.txt
- %TEMP%\rarsfx0\ss_install.xml
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\ss_install.xml
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\license.txt
- %WINDIR%\installer\101773.mst
- %TEMP%\msi641b.tmp
- %TEMP%\msi64f6.tmp
- %TEMP%\msi6a18.tmp
- %TEMP%\msi6a67.tmp
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.~xml~2
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.~dat~2
- %WINDIR%\temp\5bd5aa8f-021c-43e7-aa4d-16468bb161b2.tmp
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\isconfig.ini
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\isrt.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\klssin9x.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\klssinst.dll
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setup.inx
- %TEMP%\rarsfx0\~ss_install.~xml~2
Перемещает следующие файлы
- %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\ss_i6dcf.rra в %TEMP%\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\ss_install.xml
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_runtime.xml в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.xml~ в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_prodinfo.xml в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.xml~ в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_settings.xml в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.xml~ в %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\data\e2s_subscription.xml в %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.xml~ в %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.~xml~2
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\sspriv.dat в %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.dat~
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.dat~ в %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.~dat~2
- %ProgramFiles(x86)%\installshield installation information\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setu9fcc.rra в %ProgramFiles(x86)%\installshield installation information\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setup.inx
- %TEMP%\6bcb.rra в %ProgramFiles(x86)%\installshield installation information\{7c72aab5-8a7d-4882-950c-a1f26a949da3}\setup.ilg
Подменяет следующие файлы
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_runtime.xml
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_runtime.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_prodinfo.xml
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_prodinfo.~xml~2
- %CommonProgramFiles(x86)%\kaspersky lab\settings\ss_settings.xml
- %CommonProgramFiles(x86)%\kaspersky lab\data\e2s_subscription.xml
- %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\data\~e2s_subscription.~xml~2
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\sspriv.dat
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.xml~
- %CommonProgramFiles(x86)%\kaspersky lab\settings\~ss_settings.~xml~2
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.dat~
- %ProgramFiles(x86)%\kaspersky lab\networkagent\data\~sspriv.~dat~2
Сетевая активность
Подключается к
- '21#.#4.120.211':14000
Другое
Добавляет корневой сертификат
Ищет следующие окна
- ClassName: 'EDIT' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\rarsfx0\setup.exe' /s
- '%CommonProgramFiles(x86)%\installshield\driver\7\intel 32\idriver.exe' /RegServer
- '%ProgramFiles(x86)%\kaspersky lab\networkagent\klnagent.exe'
- '%ProgramFiles(x86)%\kaspersky lab\networkagent\klnagent.exe' -ports-wfw "%WINDIR%\TEMP\5bd5aa8f-021c-43e7-aa4d-16468bb161b2.tmp"
