Trojan.Siggen15.13608

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[<HKLM>\System\CurrentControlSet\Services\SepMasterService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\SepMasterService] 'ImagePath' = '"%ProgramFiles(x86)%\Symantec\Symantec Endpoint Protection\12.1.7004.6500.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint ...

Создает следующие сервисы

'SepMasterService' "%ProgramFiles(x86)%\Symantec\Symantec Endpoint Protection\12.1.7004.6500.105\Bin\ccSvcHst.exe" /s "Symantec Endpoint Protection" /m "%ProgramFiles(x86)%\Symantec\Symantec Endpoint Protection\1...

Изменения в файловой системе

Создает следующие файлы

%TEMP%\fe4d73.tmp
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\fallback.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\fixextend.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\fwsvpn.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\fwsvpn.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\gedatastore.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\guproxy.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\guproxyres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\hitraystatus.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\hppprotectionprovideruires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symefa.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\hwiddll.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\i2ldvp3.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ips\ipsbho.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\idsaux.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ipsca.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ipsplug.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\ips\idssettg.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\cids.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\cids.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\cids.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\imailres.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\eoc.xsd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\hwiddll.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\scripts\failure.sis
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\exchnguires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\eimloader.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symefa.sig
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\country.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dataman.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dec_abi.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\cached installs\setup.exe
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\dec3.cfg
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\default.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\defutdcd.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\defutdcd.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\imailuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\communicator.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\devman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\basheimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\devviewer.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\doscanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\dot1xtray64.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dulucbk.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dwhwizrd.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\dwhwizrdres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dwldpntscan.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ecmldr32.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symefa.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\devmanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\devmanstub.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\installteefer.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\doscan.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\iron.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lusub.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\ironx64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\luman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\lumanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\maplngid.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfc100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfc100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfc100u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfc100u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfc110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfc110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lueng.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\luctl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lusvc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfc110u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfcm100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfcm100u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfcm100u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfcm110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfcm110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfcm110u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfcm110u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\patch25d.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symdltcl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\mfc110u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfc90dll.1.config
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\mfcm100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\controlapres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\communicator.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\iron.cat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\ironx64.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\ironx64.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\ironx64.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\trstzone.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\iron\iron.db
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\isolate.ini
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lddatetm.ocx
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\lddatetmres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ldvpctls.ocx
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\lueeimres.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\iron.inf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lueeimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\ldvpctlsres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\ldvpuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\license.rtf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\licenseman.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\licensemanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\localrep.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\lotntsuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\luauth.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\luawrap.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\lueeim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ldvpdlgs.ocx
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\ldvpdlgsres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ldvpui.ocx
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\controlap.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\commonman.plg
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\cltdef.dat
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\rollbackfiles.xml
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\removefiles.xml
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\smrdefs.zip
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\bashdefs.zip
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\idsdefs.zip
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\installscript.sis
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\sylink.xml
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\serdef.dat
%BOOT_VOL%\boot\bcd
%TEMP%\symantec\idsdefs.zip
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\sep.slf
%TEMP%\firstpath\virscan1.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\agentcore.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\atl100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\atl100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\atl110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\atl110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\atpieim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\atpieimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\atpiman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\autoexcl.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\actares.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\agentcore.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\migrateuserscans.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\applearningmgr.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\avman.plg
%TEMP%\firstpath\catalog.dat
%BOOT_VOL%\boot\bcd.log
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtspx64.sys
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symelam.inf
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symelam.sys
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symelam64.cat
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symnet.inf
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symnet64.cat
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symnets.sys
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symtdi.sys
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\symtdiv.sys
nul
%TEMP%\symantec\windowsinstaller-kb893803-x86.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\avhostplugin.dll
%TEMP%\symantec\sdi.dat
%TEMP%\symantec\setaid.ini
%TEMP%\symantec\bashdefs.zip
%TEMP%\symantec\setup.ini
%TEMP%\symantec\sylink.xml
%TEMP%\symantec\sep.slf
%TEMP%\symantec\serdef.dat
%TEMP%\symantec\packlist.xml
%TEMP%\tmp7934.tmp
%TEMP%\sep_inst.log
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtspx64.cat
%TEMP%\tmpd873.tmp
%TEMP%\symantec\ssawrapper.exe
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtsp64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\avpluginimpl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\avpluginimplres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccsvchst.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccset.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccset.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\ccsetx64.cat
<DRIVERS>\sep\0c011b5c\1964.105\x64\ccsetx64.inf
<DRIVERS>\sep\0c011b5c\1964.105\x64\ccsetx64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\cccommon.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\cccommon.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\cccommon.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\avmanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccl120u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccsvc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccsvc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccvrtrst.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\checksum.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\cidseim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\cidseimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\cidseimres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\cidsman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\cidsmanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\cidstraystatus.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\help\clienthelp.chm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccsebind.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\cliproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccvrtrst.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\avpluginimpl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccscanw.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccl120u.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\avproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\avutil.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\bhca.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\bhclient.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\bhsvcplg.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\bash\bashintl.000
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\bash\bashintl.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\bash\bashopts.000
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\bash\bashopts.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccipc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccjobmgr.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccsubeng.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\bashman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\bash.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\bash.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccalert.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccerrdsp.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccgevt.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccgevt.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccglog.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\ccglog.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccipc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\basheim.dll
%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\c177f38e-fe04-44b6-89e3-f10a62d4b37a\setup.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\bash.grd
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtspx64.inf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\msl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\msvcp110.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\symnets.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spnet.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\spnetres.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtsp64.cat
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtsp64.inf
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtsp64.sys
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtspx64.cat
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtspx64.inf
<DRIVERS>\sep\0c011b5c\1964.105\x64\srtspx64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\srt.grd
<DRIVERS>\sep\0c011b5c\1964.105\x64\symnet64.cat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\srt.sig
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\srtsp\srtspp.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\srtsp_ca.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\srtsp32.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\srtspp.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\srtsp64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sshelper64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\scripts\startrollback.sis
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\scripts\startup.sis
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\stddef.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\submissionseim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\sndx64.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\sndx64.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\spmanifests\sndx64.grd
<DRIVERS>\sep\0c011b5c\1964.105\x64\symnet.inf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\submissionseimres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\smcinstres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\smcres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\smctraystatus.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\smrhandler.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sms.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\snac64.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\snacnp.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\snacnp.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\snactraystatus.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\submissionseimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\smcimpl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\srt.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sndsvc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\wfpunins.exe
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\config_org.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\localconfig_org.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\set_org.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\config_cur.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\localconfig_cur.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\locationmap.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\set_cur.dat
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\symnetdrv\trustdb.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symneti.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symrdrsv.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symredir.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\smc.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\submissionsman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sysplant.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\trident.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\tseconfig.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\tseconfigres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\tseres.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\tsysconf.xml
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\vccorlib110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\vccorlib110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\vpmseceres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\vpshell2.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\vpshellres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sysfer64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\smcguires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sysfer32.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\wgxman.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\wgxman64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\wscsavnotifier.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\wscsavnotifierres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\installdata.xml
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\contentmetadata.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\regid.1992-12.com.symantec_sep.swidtag
%ProgramFiles(x86)%\symantec\symantec endpoint protection\regid.1992-12.com.symantec_sep_windows_client_x64.swidtag
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\isolate.ini
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\isolate.ini
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\webshellres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\webshell.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\smcinst.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\symvpnimpl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\dscli.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sydvctrl.inf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sydvctrl64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sylink.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\sylink.xml
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sylinkdrop.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sylinkres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sylinksyminterfaceproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sylinksyminterfaceproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sylog.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symcorpui.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symvpnimpl.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\submissionssiscustomaction.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\submissionssisoptoutcustomaction.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\efacli.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\efainst.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\efacli64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\symnapshagent64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sympp.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\sympp.inf
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\symprotectuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\symrasman64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\symvpn.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symvpn.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\symdeltadll.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\symcorpuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\smcgui.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sisnat.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\ccl120u.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\protection64.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\protectionproviderps.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\protectionproviderps64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\protectionutil.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\protectionutilres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\pscanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\pssensor.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\qscomm32.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\qsinfo.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\profilemanagementclient.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\profilemanagement.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\protection.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\qspak32.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\rebootmgreimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\rebootmgreimres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\rebootmgrman.plg
%ALLUSERSPROFILE%\regid.1992-12.com.symantec\regid.1992-12.com.symantec_sep.swidtag
%ALLUSERSPROFILE%\regid.1992-12.com.symantec\regid.1992-12.com.symantec_sep_windows_client_x64.swidtag
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\regsshelper.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\repmgteimproxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\repmgtman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\repmgttim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\rassymeap64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\scripts\reboot.sis
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\rebootmgreim.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\profilemgrman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\repmgttimres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\msvcp100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\msvcr100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\msvcr100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\msvcr110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\msvcr110.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\09\01\rcalert.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\09\01\rcemlpxy.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\09\01\rcerrdsp.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\09\01\rcsvchst.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\nacmanager.plg
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\prodserdef.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\msvcp110.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\prodcltdef.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\nacmanagerres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\netsechstpluginres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\netsecman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\nlnhook.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\nnewdefs.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\notesextres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\patchwrap.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\patchwrap64ps.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\patchwrapps.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\platform.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\netport.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\netportres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\netsechstplugin.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\msvcp100.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\reportsubmission.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\rtvstart.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\sep-msi.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\sep-msi.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepsessionplugin.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sepsessionpluginres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepstub.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sepwin32eventlogapenderres.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\serdef.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sessionshutdown.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\seticollect.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sepmanagementclientres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepmanagementclient.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\sep-msi.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sevntx64.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sghi.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sghires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sis.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactionbash.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactioncids.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactionkmanager.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactionlue.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactionscansettings.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\siscustomactionsmc.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sfconfig.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sfman.plg
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\sfmanres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sepmodulelist.exe
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\iron\repuseed.irn
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\rtvscanps.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\runoncesessionplugin.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\savemailseshlpres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\savmainui.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\savmainuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\savseshlp.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\savseshlpres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\savstatusfinder.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\savtraystatus.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\savui.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepliveupdate.exe
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\rtvscanps64.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\sepjobcontroller.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\savuires.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\scs-sav.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\scs-sav.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\scs-sav.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sdpck32i.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symevnt.grd
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symevnt.sig
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\spmanifests\symevnt.spm
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepduhandler.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\sepjobcontroller.dll
%ALLUSERSPROFILE%\symantec\symantec endpoint protection\12.1.7004.6500.105\data\config\scancfg.dat
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\scandlgs.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\res\1033\scandlgsres.dll
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtsp64.inf
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\srtsp64.cat
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\ironx64.sys
%TEMP%\symantec\program files\symantec\name\version\bin\msvcp110.dll
%TEMP%\symantec\program files\symantec\name\version\bin\msvcr100.dll
%TEMP%\symantec\program files\symantec\name\version\bin\msvcr110.dll
%TEMP%\symantec\program files\symantec\name\version\bin\nacmanager.plg
%TEMP%\symantec\program files\symantec\name\version\bin\netport.dll
%TEMP%\symantec\program files\symantec\name\version\bin\netsechstplugin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\netsecman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\nlnhook.exe
%TEMP%\symantec\program files\symantec\name\version\bin\nlnvp.dll
%TEMP%\symantec\program files\symantec\name\version\bin\nnewdefs.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfcm100u.dll
%TEMP%\symantec\program files\symantec\name\version\bin\notesext.dll
%TEMP%\symantec\program files\symantec\name\version\bin\outlooksessionplugin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\patch25d.dll
%TEMP%\symantec\program files\symantec\name\version\bin\patchwrap.exe
%TEMP%\symantec\program files\symantec\name\version\bin\patchwrapps.dll
%TEMP%\symantec\program files\symantec\name\version\bin\profilemanagement.dll
%TEMP%\symantec\program files\symantec\name\version\bin\profilemanagementclient.dll
%TEMP%\symantec\program files\symantec\name\version\bin\profilemgrman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\protectionproviderps.dll
%TEMP%\symantec\program files\symantec\name\version\bin\protectionutil.dll
%TEMP%\symantec\program files\symantec\name\version\bin\migrateuserscans.exe
%TEMP%\symantec\program files\symantec\name\version\bin\mfcm110u.dll
%TEMP%\symantec\program files\symantec\name\version\bin\msvcp100.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfcm110.dll
%TEMP%\symantec\program files\symantec\name\version\bin\iron.dll
%TEMP%\symantec\program files\symantec\name\version\bin\qscomm32.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ldvpctls.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\ldvpdlgs.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\ldvpui.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\licenseman.dll
%TEMP%\symantec\program files\symantec\name\version\bin\localrep.plg
%TEMP%\symantec\program files\symantec\name\version\bin\lotntsui.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\luauth.dll
%TEMP%\symantec\program files\symantec\name\version\bin\luawrap.exe
%TEMP%\symantec\program files\symantec\name\version\bin\pssensor.dll
%TEMP%\symantec\program files\symantec\name\version\bin\luctl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\isolate.ini
%TEMP%\symantec\program files\symantec\name\version\bin\oeheur.dll
%TEMP%\symantec\program files\symantec\name\version\bin\lueeimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\lusub.dll
%TEMP%\symantec\program files\symantec\name\version\bin\lusvc.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfc100.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfc100u.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfc110.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfc110u.dll
%TEMP%\symantec\program files\symantec\name\version\bin\mfc90dll.1.config
%TEMP%\symantec\program files\symantec\name\version\bin\mfcm100.dll
%TEMP%\symantec\program files\symantec\name\version\bin\lueeim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ptptraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\lueng.dll
%TEMP%\symantec\program files\symantec\name\version\bin\luman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\cccommon.grd
%TEMP%\symantec\program files\symantec\name\version\bin\qsinfo.dll
%TEMP%\symantec\program files\symantec\name\version\bin\seticollect.exe
%TEMP%\symantec\program files\symantec\name\version\bin\sfconfig.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sfman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\sghi.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sis.dll
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactionbash.dll
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactioncids.dll
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactionkmanager.dll
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactionlue.dll
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactionscansettings.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepstub.exe
%TEMP%\symantec\program files\symantec\name\version\bin\siscustomactionsmc.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepsessionplugin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepmanagementclient.dll
%TEMP%\symantec\program files\symantec\name\version\bin\smcimpl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\smctraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\smrhandler.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sms.dll
%TEMP%\symantec\program files\symantec\name\version\bin\snacnp.dll
%TEMP%\symantec\program files\symantec\name\version\bin\snactraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sndsvc.dll
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\bash.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\bash.sig
%TEMP%\symantec\program files\symantec\name\version\bin\sisstatusdlg.exe
%TEMP%\symantec\program files\symantec\name\version\bin\ipsplug.dll
%TEMP%\symantec\program files\symantec\name\version\bin\smc.exe
%TEMP%\symantec\program files\symantec\name\version\bin\lddatetm.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\qspak32.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savmainui.dll
%TEMP%\symantec\program files\symantec\name\version\bin\rebootmgreimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\rebootmgrman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\repmgteimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\repmgtman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\repmgttim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\reportsubmission.dll
%TEMP%\symantec\program files\symantec\name\version\bin\roru.exe
%TEMP%\symantec\program files\symantec\name\version\bin\rtvscanps.dll
%TEMP%\symantec\program files\symantec\name\version\bin\rtvstart.exe
%TEMP%\symantec\program files\symantec\name\version\bin\sepoutlookaddin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\runoncesessionplugin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sessionshutdown.dll
%TEMP%\symantec\program files\symantec\name\version\bin\rebootmgreim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savseshlp.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savstatusfinder.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savtraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savui.exe
%TEMP%\symantec\program files\symantec\name\version\bin\scandlgs.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sdpck32i.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepduhandler.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepjobcontroller.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sepliveupdate.exe
%TEMP%\symantec\program files\symantec\name\version\bin\savemail.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ipsca.dll
%TEMP%\symantec\program files\symantec\name\version\bin\savemailseshlp.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ips\ipsbho.dll
%TEMP%\symantec\program files\symantec\name\version\bin\imailui.ocx
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\locationmap.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\trustdb.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\sympp.inf
%TEMP%\symantec\commonappdata\tags\regid.1992-12.com.symantec_sep.swidtag
%TEMP%\symantec\commonappdata\tags\regid.1992-12.com.symantec_sep_windows_client_x64.swidtag
%TEMP%\symantec\program files\symantec\name\version\bin\agentcore.dll
%TEMP%\symantec\program files\symantec\name\version\bin\applearningmgr.dll
%TEMP%\symantec\program files\symantec\name\version\bin\atl100.dll
%TEMP%\symantec\program files\symantec\name\version\bin\atl110.dll
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\localconfig_org.dat
%TEMP%\symantec\program files\symantec\name\version\bin\atpieim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\bash.spm
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\set_org.dat
%TEMP%\symantec\program files\symantec\name\version\bin\atpiman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\avman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\avpluginimpl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\avproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\avutil.dll
%TEMP%\symantec\program files\symantec\name\version\bin\basheim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\basheimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\bashman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\bhca.exe
%TEMP%\symantec\program files\symantec\name\version\bin\atpieimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\bhclient.dll
%TEMP%\symantec\program files\symantec\name\version\bin\autoexcl.exe
%TEMP%\symantec\program files\symantec\name\version\bin\avhostplugin.dll
%TEMP%\symantec\program files\symantec\name\version\bin\bhsvcplg.dll
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\localconfig_cur.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\bash\bashintl.000
%TEMP%\symantec\commonappdata\symc\name\version\data\bash\bashopts.000
%TEMP%\symantec\commonappdata\symc\name\version\data\bash\bashopts.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\cltdef.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\country.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\dec3.cfg
%TEMP%\symantec\commonappdata\symc\name\version\data\config\default.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\eoc.xsd
%TEMP%\symantec\commonappdata\symc\name\version\data\config\platform.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\prodcltdef.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\config_org.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\prodserdef.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\config_cur.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\protection64.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\sdi.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\serdef.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\stddef.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\sylink.xml
%TEMP%\symantec\commonappdata\symc\name\version\data\config\tsysconf.xml
%TEMP%\symantec\commonappdata\symc\name\version\data\ips\idssettg.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\iron\iron.db
%TEMP%\symantec\commonappdata\symc\name\version\data\iron\repuseed.irn
%TEMP%\symantec\commonappdata\symc\name\version\data\srtsp\srtspp.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\protection.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\bash\bashintl.dat
%TEMP%\symantec\commonappdata\symc\name\version\data\config\scancfg.dat
%TEMP%\symantec\program files\symantec\name\version\bin\smcgui.exe
%TEMP%\symantec\program files\symantec\name\version\bin\ccemlpxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccgevt.dll
%TEMP%\symantec\program files\symantec\name\version\bin\dwhwizrd.exe
%TEMP%\symantec\program files\symantec\name\version\bin\dwldpntscan.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ecmldr32.dll
%TEMP%\symantec\program files\symantec\name\version\bin\efacli.dll
%TEMP%\symantec\program files\symantec\name\version\bin\efainst.exe
%TEMP%\symantec\program files\symantec\name\version\bin\eimloader.dll
%TEMP%\symantec\program files\symantec\name\version\bin\elamcli.dll
%TEMP%\symantec\program files\symantec\name\version\bin\elaminst.exe
%TEMP%\symantec\program files\symantec\name\version\bin\exchngui.ocx
%TEMP%\symantec\program files\symantec\name\version\bin\doscan.exe
%TEMP%\symantec\program files\symantec\name\version\bin\devviewer.exe
%TEMP%\symantec\program files\symantec\name\version\bin\dulucbk.dll
%TEMP%\symantec\program files\symantec\name\version\bin\fixextend.exe
%TEMP%\symantec\program files\symantec\name\version\bin\guproxy.plg
%TEMP%\symantec\program files\symantec\name\version\bin\help\clienthelp.chm
%TEMP%\symantec\program files\symantec\name\version\bin\hitraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\hppprotectionproviderui.dll
%TEMP%\symantec\program files\symantec\name\version\bin\hwiddll.dll
%TEMP%\symantec\program files\symantec\name\version\bin\i2ldvp3.dll
%TEMP%\symantec\program files\symantec\name\version\bin\idsaux.dll
%TEMP%\symantec\program files\symantec\name\version\bin\idstrafficpipe.dll
%TEMP%\symantec\program files\symantec\name\version\bin\imail.dll
%TEMP%\symantec\program files\symantec\name\version\bin\fwsvpn.dll
%TEMP%\symantec\program files\symantec\name\version\bin\fwtraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\gedatastore.dll
%TEMP%\symantec\program files\symantec\name\version\bin\dscli.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccalert.dll
%TEMP%\symantec\commonappdata\symc\name\version\data\symnetdrv\set_cur.dat
%TEMP%\symantec\program files\symantec\name\version\bin\ccglog.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccipc.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccjobmgr.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccl120u.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccscanw.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccsebind.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccset.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccsubeng.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccsvc.dll
%TEMP%\symantec\program files\symantec\name\version\bin\devman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\ccerrdsp.dll
%TEMP%\symantec\program files\symantec\name\version\bin\defutdcd.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccsvchst.exe
%TEMP%\symantec\program files\symantec\name\version\bin\cidseimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\cidsman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\cidstraystatus.dll
%TEMP%\symantec\program files\symantec\name\version\bin\cliproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\commonman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\communicator.dll
%TEMP%\symantec\program files\symantec\name\version\bin\controlap.exe
%TEMP%\symantec\program files\symantec\name\version\bin\dataman.dll
%TEMP%\symantec\program files\symantec\name\version\bin\dec_abi.dll
%TEMP%\symantec\program files\symantec\name\version\bin\ccvrtrst.dll
%TEMP%\symantec\program files\symantec\name\version\bin\checksum.exe
%TEMP%\symantec\program files\symantec\name\version\bin\cidseim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\msl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\cccommon.sig
%TEMP%\symantec\program files\symantec\name\version\bin64\wgx64.sys
%TEMP%\symantec\program files\symantec\name\version\license.rtf
%TEMP%\symantec\program files\symantec\name\version\res\09\01\rcalert.dll
%TEMP%\symantec\program files\symantec\name\version\res\09\01\rcemlpxy.dll
%TEMP%\symantec\program files\symantec\name\version\res\09\01\rcerrdsp.dll
%TEMP%\symantec\program files\symantec\name\version\res\09\01\rcsvchst.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\actares.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\avmanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\avpluginimplres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\cidseimres.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\vpshell2.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\vccorlib110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\wgxman64.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\cidsmanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\dwhwizrdres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\exchnguires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\guproxyres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\hppprotectionprovideruires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\imailres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\imailuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\lddatetmres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\ldvpctlsres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\ldvpdlgsres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\controlapres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\devmanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\doscanres.dll
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\cccommon.spm
%TEMP%\symantec\program files\symantec\name\version\res\1033\ldvpuires.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\sndx64.spm
%TEMP%\symantec\program files\symantec\name\version\bin64\sydvctrl.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\sydvctrl64.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\sylinksyminterfaceproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\symepsecflt.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\symepsecflt64.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\symnapshagent64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\symrasman64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\symvpn.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\symvpnimpl.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\toastui.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\srtsp64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\toast.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\sysfer64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\teefervista\teefer.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferwin8\teefer.cat
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferwin8\teefer.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferwin8\teefer.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferxp\teefer.cat
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferxp\teefer.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferxp\teefer.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferxp\teeferm.cat
%TEMP%\symantec\program files\symantec\name\version\bin64\teeferxp\teefer_m.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\sysplant.sys
%TEMP%\symantec\program files\symantec\name\version\bin64\teefervista\teefer.cat
%TEMP%\symantec\program files\symantec\name\version\bin64\teefervista\teefer.inf
%TEMP%\symantec\program files\symantec\name\version\bin64\sshelper64.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\licensemanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\nacmanagerres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\tseconfigres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\tseres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\vpmseceres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\vpshellres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\webshellres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\wscsavnotifierres.dll
%TEMP%\symantec\program files\symantec\name\version\res\fallback.dat
%TEMP%\symantec\program files\symantec\name\version\res\maplngid.dat
%TEMP%\symantec\program files\symantec\name\version\scripts\failure.sis
%TEMP%\symantec\program files\symantec\name\version\res\1033\symelameimres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\symcorpuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\toastres.dll
%TEMP%\symantec\program files\symantec\name\version\scripts\reboot.sis
%TEMP%\symantec\sep_ne.slf
%TEMP%\symantec\setup.exe
%TEMP%\symantec\smcinst.exe
%TEMP%\symantec\smrdefs.zip
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\ccsetx64.cat
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\ccsetx64.inf
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\ccsetx64.sys
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\iron.cat
%TEMP%\symantec\system32\drivers\name\version\buildnum\x64\iron.inf
%TEMP%\symantec\program files\symantec\name\version\scripts\startrollback.sis
%TEMP%\symantec\program files\symantec\name\version\scripts\startup.sis
%TEMP%\symantec\sep64.msi
%TEMP%\symantec\program files\symantec\name\version\res\1033\symprotectuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\lotntsuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\lueeimres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\netportres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\netsechstpluginres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\notesextres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\protectionutilres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\pscanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\rebootmgreimres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\repmgttimres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\savemailseshlpres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\savmainuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sylinkres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\lumanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\submissionseimres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\savseshlpres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sepsessionpluginres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sepwin32eventlogapenderres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sfmanres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sghires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sisstatusdlgres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\smcguires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\smcinstres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\smcres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\spnetres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\savuires.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\scandlgsres.dll
%TEMP%\symantec\program files\symantec\name\version\res\1033\sepmanagementclientres.dll
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\wgx64.sys
%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin64\isolate.ini
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\cids.spm
%TEMP%\symantec\program files\symantec\name\version\bin\sylink.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sylinkdrop.exe
%TEMP%\symantec\program files\symantec\name\version\bin\sylinksyminterfaceproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sylog.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symcorpui.exe
%TEMP%\symantec\program files\symantec\name\version\bin\symdeltadll.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symdltcl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symelameim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symelameimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\submissionsman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symefa.grd
%TEMP%\symantec\program files\symantec\name\version\bin\submissionssisoptoutcustomaction.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symelamman.plg
%TEMP%\symantec\program files\symantec\name\version\bin\symrdrsv.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symredir.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symvpn.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symvpnimpl.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sysfer32.dll
%TEMP%\symantec\program files\symantec\name\version\bin\tfman.dll
%TEMP%\symantec\program files\symantec\name\version\bin\toast.dll
%TEMP%\symantec\program files\symantec\name\version\bin\trident.dll
%TEMP%\symantec\program files\symantec\name\version\bin\trstzone.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symelamproviderui.dll
%TEMP%\symantec\program files\symantec\name\version\bin\symneti.dll
%TEMP%\symantec\program files\symantec\name\version\bin\sympp.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\sndx64.grd
%TEMP%\symantec\program files\symantec\name\version\bin\tse.dll
%TEMP%\symantec\program files\symantec\name\version\bin\srtsp_ca.exe
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\ironx64.sig
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\ironx64.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\scs-sav.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\scs-sav.sig
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\scs-sav.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\sep-msi.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\sep-msi.sig
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\sep-msi.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\srt.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\srt.sig
%TEMP%\symantec\program files\symantec\name\version\bin\submissionseim.dll
%TEMP%\symantec\program files\symantec\name\version\bin\submissionseimproxy.dll
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\srt.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symefa.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symelam.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symelam.sig
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symelam.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symevnt.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symevnt.sig
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symevnt.spm
%TEMP%\symantec\program files\symantec\name\version\bin\spnet.dll
%TEMP%\symantec\program files\symantec\name\version\bin\srtsp32.dll
%TEMP%\symantec\program files\symantec\name\version\bin\srtspp.dat
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\ironx64.grd
%TEMP%\symantec\program files\symantec\name\version\bin\spmanifests\symefa.sig
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\sndx64.sig
%TEMP%\symantec\program files\symantec\name\version\bin\tseconfig.dll
%TEMP%\symantec\program files\symantec\name\version\bin\vpmsece.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfcm100u.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfcm110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfcm110u.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\msvcp100.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\msvcp110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\msvcr100.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\msvcr110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\patchwrap64ps.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\protectionproviderps64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\rassymeap64.dll
%TEMP%\symantec\program files\symantec\name\version\bin\uninstallsched.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfcm100.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfc110u.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\sepmodulelist.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\sepoutlookaddin.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\sessionstub.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\sevntx64.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\sisnat.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\smcinst.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\snac64.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\snacnp.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\cids.grd
%TEMP%\symantec\program files\symantec\name\version\bin64\spmanifests\cids.sig
%TEMP%\symantec\program files\symantec\name\version\bin64\regsshelper.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\sepjobcontroller.dll
%TEMP%\symantec\program files\symantec\name\version\bin\vccorlib110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\rtvscanps64.dll
%TEMP%\symantec\program files\symantec\name\version\bin\submissionssiscustomaction.dll
%TEMP%\symantec\program files\symantec\name\version\bin\webshell.dll
%TEMP%\symantec\program files\symantec\name\version\bin\wfpunins.exe
%TEMP%\symantec\program files\symantec\name\version\bin\wgxman.dll
%TEMP%\symantec\program files\symantec\name\version\bin\wscsavnotifier.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\agentcore.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\atl100.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\atl110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\avpluginimpl.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\ccgevt.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\ccglog.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfc100.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfc110.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\mfc100u.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\ccsvc.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\ccvrtrst.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\communicator.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\defutdcd.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\devmanstub.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\dot1xtray64.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\efacli64.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\fwsvpn.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\hwiddll.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\installteefer.exe
%TEMP%\symantec\program files\symantec\name\version\bin64\ccipc.dll
%TEMP%\symantec\program files\symantec\name\version\bin64\ccset.dll
<DRIVERS>\sep\0c011b5c\1964.105\x64\isolate.ini

Удаляет следующие файлы

%TEMP%\fe4d73.tmp
%TEMP%\tmp7934.tmp
%TEMP%\tmpd873.tmp
%TEMP%\firstpath\catalog.dat
%TEMP%\firstpath\virscan1.dat

Перемещает следующие файлы

%TEMP%\0d156cbb-f2a6-44b2-8f3c-1a4ef8d55a7e\installscript.sis в %ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\scripts\installscript.sis

Изменяет следующие файлы

%LOCALAPPDATA%\microsoft\windows\usrclass.dat.log1
%LOCALAPPDATA%\microsoft\windows\usrclass.dat

Подменяет следующие файлы

%TEMP%\firstpath\catalog.dat
%TEMP%\firstpath\virscan1.dat

Сетевая активность

Подключается к

'microsoft.com':80

TCP

Запросы HTTP GET

http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt

UDP

DNS ASK microsoft.com
DNS ASK st####.rapidssl.com

Другое

Создает и запускает на исполнение

'%TEMP%\symantec\ssawrapper.exe'
'%TEMP%\symantec\setup.exe' /s /w
'%TEMP%\symantec\program files\symantec\name\version\bin\efainst.exe' "Symantec Endpoint Protection 12.1.7004.6500" /query
'%ProgramFiles(x86)%\symantec\symantec endpoint protection\12.1.7004.6500.105\bin\ccsvchst.exe' /s "Symantec Endpoint Protection" /m "%ProgramFiles(x86)%\Symantec\Symantec Endpoint Protection\12.1.7004.6500.105\Bin\sms.dll" /prefetch:1

Запускает на исполнение

'<SYSTEM32>\msiexec.exe' /i "%TEMP%\Symantec\Sep64.msi" /qb! /l*v "%TEMP%\SEP_INST.LOG" IDCENABLE=0

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней