Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- <SYSTEM32>\tskill.exe /A fire*
- <SYSTEM32>\tskill.exe /A av*
- <SYSTEM32>\tskill.exe /A spy*
- <SYSTEM32>\tskill.exe /A anti*
- <SYSTEM32>\net.exe stop УSecurity CenterФ
- <SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\kill.bat""
- <SYSTEM32>\netsh.exe firewall set opmode mode=disable
- <SYSTEM32>\net1.exe stop УSecurity CenterФ
- AVPCC.EXE
- AVP32.EXE
- AVPM.EXE
- firefox.exe
- AVSYNMGR.EXE
- AVGCC32.EXE
- avgcc.exe
- AVGCTRL.EXE
- AVP.EXE
- AVP.COM
- %TEMP%\1.tmp\kill.bat