Техническая информация
- <SYSTEM32>\wbem\mofcomp.exe "<Текущая директория>\213.mof"
- dnf.exe
- AVPCC.EXE
- GUARD.EXE
- ecmd.exe
- opera.exe
- drweb.exe
- avgcc.exe
- [<HKCU>\Software\Microsoft\Internet Explorer\Download] 'RunInvalidSignatures' = '00000001'
- [<HKCU>\Software\Microsoft\Internet Explorer\Download] 'CheckExeSignatures' = 'no'
- %APPDATA%\Fast Antivirus 2009\cookies.sqlite
- <Текущая директория>\213.mof
- %APPDATA%\Fast Antivirus 2009\Instructions.ini
- %TEMP%\tmp1.tmp
- <DRIVERS>\etc\host_new
- %ALLUSERSPROFILE%\Application Data\SysFld\fastav.cfg
- <Текущая директория>\BackUp\Shortcut to startup_local.lnk
- <Текущая директория>\SysFld\vd952342.bd
- %ALLUSERSPROFILE%\Application Data\SysFld\fastav.cfg
- %TEMP%\tmp1.tmp
- <DRIVERS>\etc\host_new
- <DRIVERS>\etc\hosts
- 'up#####.fastantivirpro.co':80
- 'up###fnow.cn':80
- up#####.fastantivirpro.co/Instructions.ini
- DNS ASK up#####.fastantivirpro.co
- DNS ASK up###fnow.cn
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TMainWindowFASTAV' WindowName: ''