Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие системные процессы:
- <SYSTEM32>\svchost.exe
следующие пользовательские процессы:
- AVP32.EXE
- AVP.EXE
Другое:
Ищет следующие окна:
- ClassName: '' WindowName: 'logo1_.exe'
- ClassName: '' WindowName: 'logo_.exe'
- ClassName: '' WindowName: 'winEXE.exe'
- ClassName: '' WindowName: 'logo_1.exe'
- ClassName: '' WindowName: '4.exe'
- ClassName: '' WindowName: '3.exe'
- ClassName: '' WindowName: 'logo1.exe'
- ClassName: '' WindowName: 'logo.exe'
- ClassName: '' WindowName: 'y0.exe'
- ClassName: '' WindowName: 'SearchNet.exe'
- ClassName: '' WindowName: 'Iciba.exe'
- ClassName: '' WindowName: 'updater.exe'
- ClassName: '' WindowName: 'cmborxtlh.exe'
- ClassName: '' WindowName: 'y2.exe'
- ClassName: '' WindowName: 'y1.exe'
- ClassName: '' WindowName: 'Icibadown.exe'
- ClassName: '' WindowName: 'y3.exe'
- ClassName: '' WindowName: 'Xx.Tmp.exe'
- ClassName: '' WindowName: 'Winprot.exe'
- ClassName: '' WindowName: 'Zcn32.exe'
- ClassName: '' WindowName: 'Wqk.exe'
- ClassName: '' WindowName: 'Winl0g0n.exe'
- ClassName: '' WindowName: 'KuGoo.exe'
- ClassName: '' WindowName: 'Winmsg32.exe'
- ClassName: '' WindowName: 'Winmgm32.exe'
- ClassName: '' WindowName: 'Wscan.exe'
- ClassName: '' WindowName: '2.exe'
- ClassName: '' WindowName: 'MIR0.exe'
- ClassName: '' WindowName: '0.exe'
- ClassName: '' WindowName: '1.exe'
- ClassName: '' WindowName: 'olrar.exe'
- ClassName: '' WindowName: 'Winzip.exe'
- ClassName: '' WindowName: 'gl0d.exe'
- ClassName: '' WindowName: 'svch0st.exe'
- ClassName: '' WindowName: 'Msabel32.exe'
- ClassName: '' WindowName: 'Winrpcsrv.exe'
- ClassName: '' WindowName: 'liukehong.exe'
- ClassName: '' WindowName: 'Msblast.exe'
- ClassName: '' WindowName: 'Mprdll.exe'
- ClassName: '' WindowName: 'Mmc.exe'
- ClassName: '' WindowName: 'Avp32.exe'
- ClassName: '' WindowName: 'Avp.exe'
- ClassName: '' WindowName: 'Avserve.exe'
- ClassName: '' WindowName: 'Netip.exe'
- ClassName: '' WindowName: 'Cfiaudit.exe'
- ClassName: '' WindowName: 'Netspy.exe'
- ClassName: '' WindowName: 'Cfinet32.exe'
- ClassName: '' WindowName: ' Msstart.exe'
- ClassName: '' WindowName: 'Msgsvr16.exe'
- ClassName: '' WindowName: 'Mstesk.exe'
- ClassName: '' WindowName: 'Cfiadmin.exe'
- ClassName: '' WindowName: 'yassistse.exe'
- ClassName: '' WindowName: 'jinshan_cb_yassist.exe'
- ClassName: '' WindowName: '3721.exe'
- ClassName: '' WindowName: 'ylive.exe'
- ClassName: '' WindowName: 'zsearch.exe'
- ClassName: '' WindowName: 'Update.exe'
- ClassName: '' WindowName: 'jinshan_cb_cns.exe'
- ClassName: '' WindowName: 'msetup.exe'
- ClassName: '' WindowName: '7733.exe'
- ClassName: '' WindowName: 'love.exe'
- ClassName: '' WindowName: 'ieup.exe'
- ClassName: '' WindowName: 'Winvnc.exe'
- ClassName: '' WindowName: 'Systray.exe'
- ClassName: '' WindowName: 'cdnns.exe'
- ClassName: '' WindowName: 'cdnns.dll'
- ClassName: '' WindowName: 'setupcnnic.exe'
- ClassName: '' WindowName: 'cdnup.exe'
- ClassName: '' WindowName: 'inkv3.dll.exe'
- ClassName: '' WindowName: 'ocxreg2.exe'
- ClassName: '' WindowName: 'PodcastBarMini.exe'
- ClassName: '' WindowName: 'boba_super_setup-1.1.0.15.exe'
- ClassName: '' WindowName: 'haha.exe'
- ClassName: '' WindowName: 'Kiss.exe'
- ClassName: '' WindowName: 'Weather.exe'
- ClassName: '' WindowName: 'iloveyou.exe'
- ClassName: '' WindowName: 'PodcastBarMiniStarter.exe'
- ClassName: '' WindowName: 'iShare.Ver0.40.exe'
- ClassName: '' WindowName: 'lianmeng_sitesowang.exe'
- ClassName: '' WindowName: 'assist4.exe'
- ClassName: '' WindowName: 'ishare_user.exe'
- ClassName: '' WindowName: 'SkypeClient.exe'
- ClassName: '' WindowName: 'sogou_yahoo.exe'
- ClassName: '' WindowName: 'Qyule.exe'
- ClassName: '' WindowName: 'setup_aHR0cDovL3d3dy5xeXVsZS5jb20v.exe'
- ClassName: '' WindowName: 'Sysedit32.exe'
- ClassName: '' WindowName: 'Scanrew.exe'
- ClassName: '' WindowName: 'Sy***plor.exe'
- ClassName: '' WindowName: 'Scvhost.exe'
- ClassName: '' WindowName: 'Spfw.exe'
- ClassName: '' WindowName: 'SoftManager.exe'
- ClassName: '' WindowName: 'Svchost.exe'
- ClassName: '' WindowName: 'Runouce.exe'
- ClassName: '' WindowName: 'Server 1. 2.exe'
- ClassName: '' WindowName: 'System.exe'
- ClassName: '' WindowName: 'Kernel16.exe'
- ClassName: '' WindowName: 'System32.exe'
- ClassName: '' WindowName: 'Kernel32.exe'
- ClassName: '' WindowName: 'Syshelp.exe'
- ClassName: '' WindowName: 'Sy***plr.exe'
- ClassName: '' WindowName: 'Sysrunt.exe'
- ClassName: '' WindowName: 'Sysprot.exe'
- ClassName: '' WindowName: 'PPStream.exe'
- ClassName: '' WindowName: 'taobaowang.exe'
- ClassName: '' WindowName: 'PPGou.exe'
- ClassName: '' WindowName: 'QQDownload.exe'
- ClassName: '' WindowName: '??????.exe'
- ClassName: '' WindowName: '????????.exe'
- ClassName: '' WindowName: 'taobao.exe'
- ClassName: '' WindowName: 'taosetup.exe'
- ClassName: '' WindowName: 'TuoTu.exe'
- ClassName: '' WindowName: 'VAxplorer.exe'
- ClassName: '' WindowName: 'vagaa_.exe'
- ClassName: '' WindowName: 'BaiduX.exe'
- ClassName: '' WindowName: 'Thunder4.exe'
- ClassName: '' WindowName: 'BitSpirit.exe'
- ClassName: '' WindowName: 'BitTorrent.exe'
- ClassName: '' WindowName: 'vagaa.exe'
- ClassName: '' WindowName: 'FlashGet.exe'
- ClassName: '' WindowName: 'KUHOU01.exe'
- ClassName: '' WindowName: 'VIP.exe'
- ClassName: '' WindowName: 'clean.exe'
- ClassName: '' WindowName: '100baoSetup120.exe'
- ClassName: '' WindowName: 'Crack.exe'
- ClassName: '' WindowName: 'bbseesetup.exe'
- ClassName: '' WindowName: 'RedVIP.exe'
- ClassName: '' WindowName: 'bind_8286.exe'
- ClassName: '' WindowName: 'ishare.exe'
- ClassName: '' WindowName: 'FlashBT.exe'
- ClassName: '' WindowName: 'TheWorld.exe'
- ClassName: '' WindowName: '????.exe'
- ClassName: '' WindowName: '??.exe'
- ClassName: '' WindowName: 'QQSSV20.exe'
- ClassName: '' WindowName: 'p2psvr.exe'
- ClassName: '' WindowName: 'SixthSense.exe'
- ClassName: '' WindowName: 'QQSSV1.8.exe'
