Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ABCONLT' = '%WINDIR%\SYSTEM\ABCONLT.EXE'
- %WINDIR%\Server.scr /S
- %WINDIR%\system\ABCONLT.EXE
- %WINDIR%\LiveUdate.exe
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler %WINDIR%\Server.scr
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler %WINDIR%\SYSTEM\ABCONLT.EXE
- <SYSTEM32>\rundll32.exe url.dll,FileProtocolHandler %WINDIR%\LiveUdate.exe
- mpftray.exe
- nod32.exe
- GUARD.EXE
- MCAGENT.EXE
- zapro.exe
- ZONEALARM.EXE
- outpost.exe
- smc.exe
- fsav32.exe
- AVP.EXE
- AVP32.EXE
- AVGCC32.EXE
- AVGCTRL.EXE
- AVSYNMGR.EXE
- bdss.exe
- AVPCC.EXE
- AVPM.EXE
- %WINDIR%\Server.scr
- %WINDIR%\system\confw.txt
- <SYSTEM32>\taskmgr.exe.new
- %WINDIR%\LiveUdate.exe
- %WINDIR%\system\ABCONLT.EXE
- %WINDIR%\Server.scr
- %WINDIR%\LiveUdate.exe
- <SYSTEM32>\taskmgr.exe
- %TEMP%\~DF2DE8.tmp
- %TEMP%\~DF53A6.tmp