Trojan.Siggen14.227

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\sep1b9b.tmp
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\csrssdrv.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\rtvscanps64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\regsshelper.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\rassymeap64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\protectionproviderps64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\patchwrap64ps.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\msvcr110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\msvcp110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfcm110u.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfcm110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110u.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110rus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110kor.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110jpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110ita.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110fra.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110esn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110enu.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110deu.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110cht.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110chs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\mfc110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\installteefer.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\hwiddll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\fwsvpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\efacli64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\dotnethookdllcs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\dotnethookdll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\dot1xtray64.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sepjobcontroller.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\devmanstub.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sepoutlookaddin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sepwscsvc64.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\srtsp64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teefervista\teefer.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teefervista\teefer.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teefervista\teefer.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sysplant.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sysfer64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\symvpnimpl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\symvpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\symrasman64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\symnapshagent64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sydvctrl64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sydvctrl.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sshelper64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\srtsp_ca.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\srtspscan.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\sndx64.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\tseconfig.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\sndx64.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\sndx64.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\cids.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\cids.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\spmanifests\cids.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\snacnp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\snac64.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\smcinst.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sisnat.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sevntx64.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\setdadcollnatdll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sessionstub.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\sepmodulelist.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\defutdcd.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\csrssdll64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccvrtrst.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symelamproviderui.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symelameim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symdltcl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symdeltadll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symcorpui.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sylog.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sylinksyminterfaceproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sylinkdrop.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionssisoptoutcustomaction.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionssiscustomaction.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionsman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionseimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionseim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\submissionbinding.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sticldr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ssleay32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\srtsp_ca.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\srtspscan.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\srtspp.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\srtsp32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sqsvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sqscr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spocclnt.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spnet.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symevnt.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symevnt.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symevnt.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symelam.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symelam.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symelameimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symerr.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccset.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sympp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccsvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symneti.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\cclib.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccipc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccglog.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\ccgevt.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\avpluginimpl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\atl110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\agentcore.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\wscsavnotifier.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\wgxman.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\wfpunins.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\webshell.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\vrmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symelam.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\vpmsece.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\vccorlib110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\tse.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\trstzone.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\trident.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\toast.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\tfman.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\tdadsvchstplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\tdadman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sysfer32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symvpnimpl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symvpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symv8.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symredir.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symrdrsv.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teeferwin8\teefer.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\symelamman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teeferwin8\teefer.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\lumanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\edrdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sticdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symtdiv.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symtdi.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symnets.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symnet64.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symnet64.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symelam64.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symelam.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\symelam.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtspx64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtspx64.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtspx64.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtsp64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtsp64.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\srtsp64.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\ironx64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\iron.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\iron.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\ccsetx64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\ccsetx64.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\system32\drivers\name\version\buildnum\x64\ccsetx64.cat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\smcinst.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\setup.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sep_ne.slf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sep64.msi
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\scripts\startup.sis
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\scripts\startrollback.sis
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\scripts\reboot.sis
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\maplngid.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\scripts\failure.sis
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\packlist.xml
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\hidefs.zip
%TEMP%\firstpath\catalog.dat
%TEMP%\0ca984c7-767a-478c-8190-70402ed649f9\487ca695-15a4-475b-b189-21c32aed2ccb\setup.exe
%TEMP%\0ca984c7-767a-478c-8190-70402ed649f9\seticollect.exe
%WINDIR%\temp\idc.xml
nul
%WINDIR%\temp\sepinstalltracesession.etl
%TEMP%\df753fa6-8d51-4a9b-844f-6bf539b31341\msvcr110.dll
%TEMP%\df753fa6-8d51-4a9b-844f-6bf539b31341\ssleay32.dll
%TEMP%\df753fa6-8d51-4a9b-844f-6bf539b31341\libeay32.dll
%TEMP%\df753fa6-8d51-4a9b-844f-6bf539b31341\communicatorca.dll
%TEMP%\tmpe53f.tmp
%TEMP%\sep_inst.log
%TEMP%\tmp64bb.tmp
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\ntrdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\idsdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\wscsavnotifierres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\setup.ini
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sep.slf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sylink.xml
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\irondefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\ironwldefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\ssawrapper.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\ironrevokedefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\serdef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\tdaddefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\setaid.ini
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\acdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\sdi.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\bashdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\efavtdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\fallback.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\webshellres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\protectionutil.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\nacmanagerres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\licensemanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\ldvpuires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\ldvpdlgsres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\ldvpctlsres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\lddatetmres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\hppprotectionprovideruires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\guproxyres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\exchnguires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\dwhwizrdres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\doscanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\devmanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\controlapres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\cidsmanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\cidseimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\avpluginimplres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\avmanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\actares.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\09\01\sqres.loc
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\09\01\rcsvchst.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\09\01\rcerrdsp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\09\01\rcemlpxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\09\01\rcalert.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\license.rtf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\wgxman64.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\wgx64.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\vpshell2.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\vccorlib110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\toastui.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\netportres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\netsechstpluginres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\vpshellres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sghires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sisstatusdlgres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\vpmseceres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\tseres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\tseconfigres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\toastres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\tdadsvchstpluginres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\symprotectuires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\symelameimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\symcorpuires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\submissionseimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\spnetres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\smcres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\smcinstres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\smcguires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\toast.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin64\teeferwin8\teefer.sys
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\lueeimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sepwin32eventlogapenderres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sepsessionpluginres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sepmanagementclientres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\scandlgsres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\savuires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\savseshlpres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\savmainuires.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\saepsvchstpluginres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\repmgttimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\rebootmgreimres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\pscanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\protectionutilres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\ntrmanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\res\1033\sfmanres.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symefa.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symefa.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\symefa.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccsvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dulucbk.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dscli.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dotnethookdllcs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dotnethookdll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\doscan.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\diarkive.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\devviewer.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\devman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\defutdcd.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dec_abi.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dataman.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csrssdrvloaddll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csrssdll32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csdkvr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csdkpch.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csdkedr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\csdk.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\controlap.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\communicator.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\commonman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cliproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cidstraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cidsman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cidseimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cidseim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\checksum.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccvrtrst.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccsvchst.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\edrcmp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dwldpntscan.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\edrmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccsubeng.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ldvpdlgs.ocx
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ldvpctls.ocx
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lddatetm.ocx
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\isolate.ini
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ironuser.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\irondatamigration.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\iron.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ipsplug.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\idstrafficpipe.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\idsaux.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\i2ldvp3.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\hwiddll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\hppprotectionproviderui.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\hitraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\help\clienthelp.chm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\libcurl-wintls.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\guproxy.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\gedatastore.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\fwtraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\fwsvpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\fixextend.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\exchngui.ocx
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\entitlementman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\elaminst.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\elamcli.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\eimloader.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\efainst.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\efacli.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\edripc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ldvpui.ocx
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccset.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccsebind.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\localconfig_org.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\config_org.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\config_cur.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\srtsp\srtspp.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\iron\iron.db
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\ips\pep_rul.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\ips\ngfw_config.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\ips\idssettg.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\tsysconf.xml
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\sylink.xml
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\stddef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\serdef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\sdi.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\scancfg.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\protection64.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\protection.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\prodserdef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\prodcltdef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\platform.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\eoc.xsd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\default.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\dec3.cfg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\country.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\config\cltdef.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\bash\bashopts.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\bash\bashopts.000
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\bash\bashintl.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\bash\bashintl.000
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\locationmap.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\set_cur.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\set_org.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\localconfig_cur.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\symnetdrv\trustdb.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\cclib.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccscanw.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccjobmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccipc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccglog.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccgevt.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccerrdsp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ccalert.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\bhsvcplg.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\bhclient.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\bashman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\basheimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\basheim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\avutil.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\libcurl-openssl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\hidman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\avproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\avhostplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\autoexcl.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\atpiman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\atpieimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\atpieim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\atl110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\applearningmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\agentcore.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\pchdefs.zip
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\dcsagent.cab
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\tags\regid.1992-12.com.symantec_sep_windows_client_x64.swidtag
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\tags\regid.1992-12.com.symantec_sep.swidtag
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\commonappdata\symc\name\version\data\sympp.inf
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\avpluginimpl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\avman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\dwhwizrd.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\libeay32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionlue.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionscansettings.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionkmanager.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactioncloud.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactioncids.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionbash.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sis.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sghi.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sfman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sfconfig.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\seticollect.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\setdadcollnatdll.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\setdad.collector.exe.config
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\setdad.collector.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sessionshutdown.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepstub.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepsessionplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepoutlookaddin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepmanagementclient.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepliveupdate.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepjobcontroller.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sepduhandler.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sds_loader_x86.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sdpck32i.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\scandlgs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\savui.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\savtraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\savstatusfinder.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\savseshlp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\savmainui.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionsmc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sisstatusdlg.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\srt.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\cccommon.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\ironx64.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\srt.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\srt.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-saep.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-saep.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-saep.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-msi.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-msi.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\sep-msi.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\scs-sav.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\scs-sav.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\scs-sav.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\ironx64.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\ironx64.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\siscustomactionsaep.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\saepsvchstplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\libxml2.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\cccommon.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\bash.spm
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\bash.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\bash.grd
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sndsvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\snactraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\snacnp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\sms.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\smrhandler.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\smctraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\smcimpl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\smcgui.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\smc.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\spmanifests\cccommon.sig
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\smrdefs.zip
%TEMP%\firstpath\virscan1.dat
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\rtvscanps.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\msvcp110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\msl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\migrateuserscans.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfcm110u.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfcm110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110u.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110rus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110kor.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110jpn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110ita.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110fra.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110esn.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110enu.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110deu.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110cht.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110chs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\mfc110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lusvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lusub.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\luman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lueng.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lueeimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lueeim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\luctl.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\luauth.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\lpssvc.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\localrep.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\licenseman.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\nacmanager.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\netdscvr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\msvcr110.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\netport.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\roru.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\netsechstplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\reportsubmission.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\repmgttim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\repmgtman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\repmgteimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\rebootmgrman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\rebootmgreimproxy.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\rebootmgreim.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\qspak32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\qsinfo.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\qscomm32.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\pushinst.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ptptraystatus.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\pssensor.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\runoncesessionplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\rtvstart.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\protectionproviderps.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\profilemgrman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\profilemanagementclient.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\profilemanagement.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\pchmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\pchcmp.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\patchwrapps.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\patchwrap.exe
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\patch25d.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\outlooksessionplugin.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ntrmgr.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\ntrman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\nnewdefs.dll
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\netsecman.plg
%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\proxyclt.dll
%TEMP%\0ca984c7-767a-478c-8190-70402ed649f9\rollbackfiles.xml

Удаляет следующие файлы

%TEMP%\sep1b9b.tmp
%TEMP%\tmp64bb.tmp
%TEMP%\tmpe53f.tmp
%WINDIR%\temp\idc.xml
%TEMP%\firstpath\catalog.dat
%TEMP%\firstpath\virscan1.dat

Подменяет следующие файлы

%WINDIR%\temp\idc.xml
%TEMP%\firstpath\catalog.dat
%TEMP%\firstpath\virscan1.dat

Сетевая активность

Подключается к

'microsoft.com':80

UDP

DNS ASK microsoft.com

Другое

Добавляет корневой сертификат

Создает и запускает на исполнение

'%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\ssawrapper.exe'
'%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\setup.exe' /s /w
'%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\program files\symantec\name\version\bin\efainst.exe' "Symantec Endpoint Protection 14.2.4814.1101" /query

Запускает на исполнение

'<SYSTEM32>\msiexec.exe' /i "%TEMP%\95238a70-d73e-4772-861f-ea0489a5013e\Sep64.msi" /qn /l*v "%TEMP%\SEP_INST.LOG"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней