|
Der Schädling Win32/Adware.SecToolbar Adware
erstellt, bzw. ändert (falls bereits vorhanden) folgende Einträge in der systembeschreibenden Datenbasis:
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NI.UGA6P_0001_N120M1710"="<actualdrive><actualdir><actualfile>" -nag
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVSystemCare"="C:\Program Files\AVSystemCare\pgs.exe"
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "bm"="C:\Program Files\Common Files\AVSystemCare\bm.exe" dm=http://avsystemcare.com ad=http://avsystemcare.com sd=http://avsystemcare.com
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ptask"="C:\Program Files\AVSystemCare\ptask.exe"
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ugac"="C:\PROGRA~1\COMMON~1\AVSYST~1\ugac.exe" -start
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NI.UGA6P_0001_N120M1710"="<actualdrive><actualdir><actualfile>" -nag
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "AVSystemCare"="C:\Program Files\AVSystemCare\pgs.exe"
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "bm"="C:\Program Files\Common Files\AVSystemCare\bm.exe" dm=http://avsystemcare.com ad=http://avsystemcare.com sd=http://avsystemcare.com
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ptask"="C:\Program Files\AVSystemCare\ptask.exe"
- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ugac"="C:\PROGRA~1\COMMON~1\AVSYST~1\ugac.exe" -start
|