Перейти к содержанию

Вирус с расширением зашифрованных файлов "HARMA" (Filedecryptor@protonmail.com MrRdx@cock.li)


Рекомендуемые сообщения

Добрый день! Прошу помощи в расшифровке файлов.

 

Вирус harma зашифровал sql базы 1с и другие файлы на server 2012r2 standart x64.

Теперь файлы выглядят примерно так - "Счет на оплату 11 от ХХ марта 2020 г.pdf.Email=[Filedecryptor@protonmail.com]ID=[ХХХХХХХХХХХХХХХ].odveta.id-ХХХХХХХХ.[MrRdx@cock.li]".HARMA

Восстановление бекапов не сработало (бекапы не читаемы после восстановления), админ не позаботился про актуальные выгрузки БД 1С в разные места.

 

Подскажите что можно сделать?

 

Если это будет полезно, то злоумышленник после переписки расшифровал один файл как образец.

 

AutoLogger не запустился, говорит в системе не хватает файла.

Запустил FRST64, логи во вложенииFRST64.7z

 

Образец текст файла записки c названием "FILES ENCRIPTED.TXT":

all your data has been locked us

You want to return?

Write emeil MrRdx@coc.li or MrRDX@protonmail.com

Ссылка на сообщение
Поделиться на другие сайты

 

 


AutoLogger не запустился, говорит в системе не хватает файла.
скриншот окна с ошибкой сделайте.

 

1. Выделите следующий код:
Start::
CreateRestorePoint:

HKLM\...\Run: [Microsoft update] => attrib c:\documents and settings\sup +h +s
HKLM\...\Run: [Microsoft update software] => attrib c:\documents and settings\sup.SERVER +h +s
HKLM\...\Run: [8UNGT8_payload.exe] => C:\Users\Администратор\AppData\Roaming\8UNGT8_payload.exe
HKLM\...\Run: [C:\Windows\System32\Info.hta] => C:\Windows\System32\Info.hta [13911 2020-03-05] () [File not signed]
HKLM\...\Run: [C:\Users\Администратор\AppData\Roaming\Info.hta] => C:\Users\Администратор\AppData\Roaming\Info.hta [13911 2020-03-05] () [File not signed]

IFEO\1sass.exe: [Debugger] fixmapi.exe
IFEO\1svhost.exe: [Debugger] fixmapi.exe
IFEO\1task.exe: [Debugger] fixmapi.exe
IFEO\3306.exe: [Debugger] fixmapi.exe
IFEO\360AP.exe: [Debugger] fixmapi.exe
IFEO\360boxmain.exe: [Debugger] fixmapi.exe
IFEO\360DocProtect.exe: [Debugger] fixmapi.exe
IFEO\360EntClient.exe: [Debugger] fixmapi.exe
IFEO\360rp.exe: [Debugger] fixmapi.exe
IFEO\360rps.exe: [Debugger] fixmapi.exe
IFEO\360rps.exe360bdoctor.exe: [Debugger] fixmapi.exe
IFEO\360sd.exe: [Debugger] fixmapi.exe
IFEO\360tray.exe: [Debugger] fixmapi.exe
IFEO\360TsLiveUpd.exe: [Debugger] fixmapi.exe
IFEO\360WangPan.exe: [Debugger] fixmapi.exe
IFEO\3931g1717y.exe: [Debugger] fixmapi.exe
IFEO\a.exe: [Debugger] fixmapi.exe
IFEO\a1g.exe: [Debugger] fixmapi.exe
IFEO\a2guard.exe: [Debugger] fixmapi.exe
IFEO\a2service.exe: [Debugger] fixmapi.exe
IFEO\a2start.exe: [Debugger] fixmapi.exe
IFEO\aawservice.exe: [Debugger] fixmapi.exe
IFEO\acassrvc.exe: [Debugger] fixmapi.exe
IFEO\accasrvc.exe: [Debugger] fixmapi.exe
IFEO\ACCLNTSRV.EXE: [Debugger] fixmapi.exe
IFEO\acs.exe: [Debugger] fixmapi.exe
IFEO\Ad-Aware.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\AdAwareDesktop.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\AdAwareService.exe: [Debugger] fixmapi.exe
IFEO\AdAwareTray.exe: [Debugger] fixmapi.exe
IFEO\ADDCLIENT.EXE: [Debugger] fixmapi.exe
IFEO\Adguard.exe: [Debugger] fixmapi.exe
IFEO\AdguardSvc.exe: [Debugger] fixmapi.exe
IFEO\AdminServer.exe: [Debugger] fixmapi.exe
IFEO\AdobeUpdater.exe: [Debugger] fixmapi.exe
IFEO\agent.exe: [Debugger] fixmapi.exe
IFEO\AgentMaint.exe: [Debugger] fixmapi.exe
IFEO\AgentSvc.exe: [Debugger] fixmapi.exe
IFEO\AgScan.exe: [Debugger] fixmapi.exe
IFEO\ALMon.exe: [Debugger] fixmapi.exe
IFEO\Almsum.exe: [Debugger] fixmapi.exe
IFEO\ALsvc.exe: [Debugger] fixmapi.exe
IFEO\AluSchedulerSvc.exe: [Debugger] fixmapi.exe
IFEO\amgrsrvc.exe: [Debugger] fixmapi.exe
IFEO\AMSP_LogServer.exe: [Debugger] fixmapi.exe
IFEO\ANNOUNCE.EXE: [Debugger] fixmapi.exe
IFEO\Antivirus_Free_Edition_x86.exe: [Debugger] fixmapi.exe
IFEO\ANTIVIR▄.exe: [Debugger] fixmapi.exe
IFEO\anti_ransom.exe: [Debugger] fixmapi.exe
IFEO\anti_ransomware_service.exe: [Debugger] fixmapi.exe
IFEO\anti_ransom_gui.exe: [Debugger] fixmapi.exe
IFEO\AnVir.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\anvir64.exe: [Debugger] fixmapi.exe
IFEO\anvirlauncher.exe: [Debugger] fixmapi.exe
IFEO\aosbrk64.exe: [Debugger] fixmapi.exe
IFEO\aosrts.exe: [Debugger] fixmapi.exe
IFEO\aostray.exe: [Debugger] fixmapi.exe
IFEO\ApacheMonitor.exe: [Debugger] fixmapi.exe
IFEO\APCONSVC.EXE: [Debugger] fixmapi.exe
IFEO\apgr.exe: [Debugger] fixmapi.exe
IFEO\ApVxdWin.exe: [Debugger] fixmapi.exe
IFEO\arrakis3.exe: [Debugger] fixmapi.exe
IFEO\ARWSRVC.EXE: [Debugger] fixmapi.exe
IFEO\ASC.exe: [Debugger] fixmapi.exe
IFEO\ASCService.exe: [Debugger] fixmapi.exe
IFEO\ASCTray.exe: [Debugger] fixmapi.exe
IFEO\asdsvc.exe: [Debugger] fixmapi.exe
IFEO\ASMAIN.EXE: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\ASP.NET.exe: [Debugger] fixmapi.exe
IFEO\ASPLnchr.exe: [Debugger] fixmapi.exe
IFEO\assistant.exe: [Debugger] fixmapi.exe
IFEO\aswclear.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\aswclear5.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\aswDisp.exe: [Debugger] fixmapi.exe
IFEO\aswEngSrv.exe: [Debugger] fixmapi.exe
IFEO\aswidsagent.exe: [Debugger] fixmapi.exe
IFEO\aswidsagenta.exe: [Debugger] fixmapi.exe
IFEO\aswMaiSv.exe: [Debugger] fixmapi.exe
IFEO\aswServ.exe: [Debugger] fixmapi.exe
IFEO\aswUpdSv.exe: [Debugger] fixmapi.exe
IFEO\aswWebSv.exe: [Debugger] fixmapi.exe
IFEO\atiecla.exe: [Debugger] fixmapi.exe
IFEO\auditd.exe: [Debugger] fixmapi.exe
IFEO\AutoCare.exe: [Debugger] fixmapi.exe
IFEO\autoDENGI.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\autorenewal.exe: [Debugger] fixmapi.exe
IFEO\Autorun.exe: [Debugger] fixmapi.exe
IFEO\autoruns.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\AVAgent.exe: [Debugger] fixmapi.exe
IFEO\AvastAvWrapper.exe: [Debugger] fixmapi.exe
IFEO\AvastSvc.exe: [Debugger] fixmapi.exe
IFEO\AvastUI.exe: [Debugger] fixmapi.exe
IFEO\avcenter.exe: [Debugger] fixmapi.exe
IFEO\avciman.exe: [Debugger] fixmapi.exe
IFEO\AVENGINE.EXE: [Debugger] fixmapi.exe
IFEO\AvgAdminServerMonitora.exe: [Debugger] fixmapi.exe
IFEO\avgadmsva.exe: [Debugger] fixmapi.exe
IFEO\avgarkt.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\avgcefrend.exe: [Debugger] fixmapi.exe
IFEO\avgchsvx.exe: [Debugger] fixmapi.exe
IFEO\avgcsrva.exe: [Debugger] fixmapi.exe
IFEO\avgcsrvx.exe: [Debugger] fixmapi.exe
IFEO\avgemca.exe: [Debugger] fixmapi.exe
IFEO\avgemcx.exe: [Debugger] fixmapi.exe
IFEO\avgidsagent.exe: [Debugger] fixmapi.exe
IFEO\avgidsagenta.exe: [Debugger] fixmapi.exe
IFEO\AVGIDSMonitor.exe: [Debugger] fixmapi.exe
IFEO\avgnsa.exe: [Debugger] fixmapi.exe
IFEO\avgnsx.exe: [Debugger] fixmapi.exe
IFEO\avgnt.exe: [Debugger] fixmapi.exe
IFEO\avgrsa.exe: [Debugger] fixmapi.exe
IFEO\avgrsx.exe: [Debugger] fixmapi.exe
IFEO\AVGSvc.exe: [Debugger] fixmapi.exe
IFEO\avgsvca.exe: [Debugger] fixmapi.exe
IFEO\avgsvcx.exe: [Debugger] fixmapi.exe
IFEO\avgtray.exe: [Debugger] fixmapi.exe
IFEO\avguard.exe: [Debugger] fixmapi.exe
IFEO\avgui.exe: [Debugger] fixmapi.exe
IFEO\avguix.exe: [Debugger] fixmapi.exe
IFEO\AvgUpgrade.exe: [Debugger] fixmapi.exe
IFEO\avgwdsvc.exe: [Debugger] fixmapi.exe
IFEO\avgwdsvca.exe: [Debugger] fixmapi.exe
IFEO\avgwdsvcx.exe: [Debugger] fixmapi.exe
IFEO\Avira.ServiceHost.exe: [Debugger] fixmapi.exe
IFEO\Avira.Systray.exe: [Debugger] fixmapi.exe
IFEO\AVKProxy.exe: [Debugger] fixmapi.exe
IFEO\AVKService.exe: [Debugger] fixmapi.exe
IFEO\AVKTray.exe: [Debugger] fixmapi.exe
IFEO\AVKWCtl.exe: [Debugger] fixmapi.exe
IFEO\AvLaunch.exe: [Debugger] fixmapi.exe
IFEO\avp.exe: [Debugger] fixmapi.exe
IFEO\avpmapp.exe: [Debugger] fixmapi.exe
IFEO\avpsus.exe: [Debugger] fixmapi.exe
IFEO\avpui.exe: [Debugger] fixmapi.exe
IFEO\avshadow.exe: [Debugger] fixmapi.exe
IFEO\avwebgrd.exe: [Debugger] fixmapi.exe
IFEO\avz.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\AYCAgent.ayc: [Debugger] fixmapi.exe
IFEO\AYCAgentSrv.ayc: [Debugger] fixmapi.exe
IFEO\AYCRTSrv.ayc: [Debugger] fixmapi.exe
IFEO\AYCUpdSrv.ayc: [Debugger] fixmapi.exe
IFEO\BaiduAnSvc.exe: [Debugger] fixmapi.exe
IFEO\BaiduAnTray.exe: [Debugger] fixmapi.exe
IFEO\BaiduHips.exe: [Debugger] fixmapi.exe
IFEO\BaiduProtect.exe: [Debugger] fixmapi.exe
IFEO\BASupSrvc.exe: [Debugger] fixmapi.exe
IFEO\BASupSrvcCnfg.exe: [Debugger] fixmapi.exe
IFEO\BASupSrvcUpdater.exe: [Debugger] fixmapi.exe
IFEO\bbservice.exe: [Debugger] fixmapi.exe
IFEO\bcc.exe: [Debugger] fixmapi.exe
IFEO\bccavsvc.exe: [Debugger] fixmapi.exe
IFEO\bcn.exe: [Debugger] fixmapi.exe
IFEO\bdagent.exe: [Debugger] fixmapi.exe
IFEO\BDALeakfixer.exe: [Debugger] fixmapi.exe
IFEO\BDAvScanner.exe: [Debugger] fixmapi.exe
IFEO\BDdaSvc.exe: [Debugger] fixmapi.exe
IFEO\bddownloader.exe: [Debugger] fixmapi.exe
IFEO\BDFileServer.exe: [Debugger] fixmapi.exe
IFEO\BDFsTray.exe: [Debugger] fixmapi.exe
IFEO\bdlived2.exe: [Debugger] fixmapi.exe
IFEO\BDLogger.exe: [Debugger] fixmapi.exe
IFEO\bdlserv.exe: [Debugger] fixmapi.exe
IFEO\BDMiniDlUpdate.exe: [Debugger] fixmapi.exe
IFEO\bdredline.exe: [Debugger] fixmapi.exe
IFEO\bdregsvr2.exe: [Debugger] fixmapi.exe
IFEO\bdsafecenter.exe: [Debugger] fixmapi.exe
IFEO\BDScheduler.exe: [Debugger] fixmapi.exe
IFEO\BDSSVC.EXE: [Debugger] fixmapi.exe
IFEO\BDStatistics.exe: [Debugger] fixmapi.exe
IFEO\bdwtxag.exe: [Debugger] fixmapi.exe
IFEO\BitDefenderCom.exe: [Debugger] fixmapi.exe
IFEO\BitTorrentAntivirus.exe: [Debugger] fixmapi.exe
IFEO\Bka.exe: [Debugger] fixmapi.exe
IFEO\BkavHome.exe: [Debugger] fixmapi.exe
IFEO\BkavHomeUpdateService.exe: [Debugger] fixmapi.exe
IFEO\BkavService.exe: [Debugger] fixmapi.exe
IFEO\BkavSystemServer.exe: [Debugger] fixmapi.exe
IFEO\BkavSystemService.exe: [Debugger] fixmapi.exe
IFEO\BkavUtil.exe: [Debugger] fixmapi.exe
IFEO\BkavWQService.exe: [Debugger] fixmapi.exe
IFEO\bkbk.exe: [Debugger] fixmapi.exe
IFEO\BKPUTIL.EXE: [Debugger] fixmapi.exe
IFEO\BLuPro.exe: [Debugger] fixmapi.exe
IFEO\BluProService.exe: [Debugger] fixmapi.exe
IFEO\bmc-cpu-32: [Debugger] fixmapi.exe
IFEO\bmc-cpu.exe: [Debugger] fixmapi.exe
IFEO\boost.exe: [Debugger] fixmapi.exe
IFEO\bootsvchost.exe: [Debugger] fixmapi.exe
IFEO\bot.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\brosec.exe: [Debugger] fixmapi.exe
IFEO\BrowserManager.exe: [Debugger] fixmapi.exe
IFEO\BrowserManagerGUI.exe: [Debugger] fixmapi.exe
IFEO\BrowserManagerShow.exe: [Debugger] fixmapi.exe
IFEO\brutb.exe: [Debugger] fixmapi.exe
IFEO\brute.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\BSSISS.EXE: [Debugger] fixmapi.exe
IFEO\BullGuard.exe: [Debugger] fixmapi.exe
IFEO\BullGuardBhvScanner.exe: [Debugger] fixmapi.exe
IFEO\BullGuardScanner.exe: [Debugger] fixmapi.exe
IFEO\BullGuardUpdate.exe: [Debugger] fixmapi.exe
IFEO\BurstTCPClient.exe: [Debugger] fixmapi.exe
IFEO\BusinessMessaging.exe: [Debugger] fixmapi.exe
IFEO\BWMeter.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\BWMeterConSvc.exe: [Debugger] fixmapi.exe
IFEO\ByteFence.exe: [Debugger] fixmapi.exe
IFEO\ByteFenceService.exe: [Debugger] fixmapi.exe
IFEO\CagService.exe: [Debugger] fixmapi.exe
IFEO\Cain.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\cavwp.exe: [Debugger] fixmapi.exe
IFEO\cbVSCService11.exe: [Debugger] fixmapi.exe
IFEO\ccApp.exe: [Debugger] fixmapi.exe
IFEO\ccavsrv.exe: [Debugger] fixmapi.exe
IFEO\ccavvirth.exe: [Debugger] fixmapi.exe
IFEO\ccEvtMgr: [Debugger] fixmapi.exe
IFEO\ccEvtMgr.exe: [Debugger] fixmapi.exe
IFEO\CCleaner.exe: [Debugger] fixmapi.exe
IFEO\CCleaner64.exe: [Debugger] fixmapi.exe
IFEO\CCLM.EXE: [Debugger] fixmapi.exe
IFEO\CcmEventCollector.exe: [Debugger] fixmapi.exe
IFEO\ccminer-x64.exe: [Debugger] fixmapi.exe
IFEO\CcmService.exe: [Debugger] fixmapi.exe
IFEO\ccsce.exe: [Debugger] fixmapi.exe
IFEO\ccSECMgr.exe: [Debugger] fixmapi.exe
IFEO\ccSetMgr.exe: [Debugger] fixmapi.exe
IFEO\ccSvcHst.exe: [Debugger] fixmapi.exe
IFEO\cdhtr.exe: [Debugger] fixmapi.exe
IFEO\cefutil.exe: [Debugger] fixmapi.exe
IFEO\certsvc.exe: [Debugger] fixmapi.exe
IFEO\cfp.exe: [Debugger] fixmapi.exe
IFEO\cfpupdat.exe: [Debugger] fixmapi.exe
IFEO\cgminer.exe: [Debugger] fixmapi.exe
IFEO\chromodo_updater.exe: [Debugger] fixmapi.exe
IFEO\ciprotect.exe: [Debugger] fixmapi.exe
IFEO\cis.exe: [Debugger] fixmapi.exe
IFEO\cissesrv.exe: [Debugger] fixmapi.exe
IFEO\CisTray.exe: [Debugger] fixmapi.exe
IFEO\clamd.exe: [Debugger] fixmapi.exe
IFEO\ClamSentinel.exe: [Debugger] fixmapi.exe
IFEO\ClamTray.exe: [Debugger] fixmapi.exe
IFEO\ClearLock.exe: [Debugger] fixmapi.exe
IFEO\Client Server Runtime Procces.exe: [Debugger] fixmapi.exe
IFEO\ClientManager.exe: [Debugger] fixmapi.exe
IFEO\CLNDESK.EXE: [Debugger] fixmapi.exe
IFEO\CLOUDSUM.EXE: [Debugger] fixmapi.exe
IFEO\cmdagent.exe: [Debugger] fixmapi.exe
IFEO\cmdvirth.exe: [Debugger] fixmapi.exe
IFEO\CMSERVER.EXE: [Debugger] fixmapi.exe
IFEO\CNTAoSMgr.exe: [Debugger] fixmapi.exe
IFEO\collectoragent.exe: [Debugger] fixmapi.exe
IFEO\command.exe: [Debugger] fixmapi.exe
IFEO\conhostgui.exe: [Debugger] fixmapi.exe
IFEO\Conime.exe: [Debugger] fixmapi.exe
IFEO\consctl.exe: [Debugger] fixmapi.exe
IFEO\consctlx.exe: [Debugger] fixmapi.exe
IFEO\console.exe: [Debugger] fixmapi.exe
IFEO\CONTACTU.EXE: [Debugger] fixmapi.exe
IFEO\coreFrameworkHost.exe: [Debugger] fixmapi.exe
IFEO\coreServiceShell.exe: [Debugger] fixmapi.exe
IFEO\CpService.exe: [Debugger] fixmapi.exe
IFEO\cpuminer-aes-sse42.exe: [Debugger] fixmapi.exe
IFEO\cpuminer-sse42.exe: [Debugger] fixmapi.exe
IFEO\cpuminer.exe: [Debugger] fixmapi.exe
IFEO\cpuminer_opt_AES.exe: [Debugger] fixmapi.exe
IFEO\cpuminer_opt_AVX2_AES.exe: [Debugger] fixmapi.exe
IFEO\cpuminer_opt_AVX_AES.exe: [Debugger] fixmapi.exe
IFEO\cpuminer_x64_SSE2.exe: [Debugger] fixmapi.exe
IFEO\cputest.exe: [Debugger] fixmapi.exe
IFEO\cpx.exe: [Debugger] fixmapi.exe
IFEO\CrashService.exe: [Debugger] fixmapi.exe
IFEO\CREPKILL.EXE: [Debugger] fixmapi.exe
IFEO\CRYPWARN.EXE: [Debugger] fixmapi.exe
IFEO\cscce.exe: [Debugger] fixmapi.exe
IFEO\cses.exe: [Debugger] fixmapi.exe
IFEO\CSPAgent.exe: [Debugger] fixmapi.exe
IFEO\CSPAuth.exe: [Debugger] fixmapi.exe
IFEO\csrcs.exe: [Debugger] fixmapi.exe
IFEO\csrs.exe: [Debugger] fixmapi.exe
IFEO\csrsc.exe: [Debugger] fixmapi.exe
IFEO\csrssas.exe: [Debugger] fixmapi.exe
IFEO\csrssl.exe: [Debugger] fixmapi.exe
IFEO\csrsst.exe: [Debugger] fixmapi.exe
IFEO\cssrs.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\fixmapi.exe
IFEO\csssrv64.exe: [Debugger] fixmapi.exe
IFEO\CUI.exe: [Debugger] fixmapi.exe
IFEO\cureit.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\DailyNews.exe: [Debugger] fixmapi.exe
IFEO\DAO_Log.exe: [Debugger] fixmapi.exe
IFEO\DbSecuritySpt.exe: [Debugger] fixmapi.exe
IFEO\DbServer.exe: [Debugger] fixmapi.exe
IFEO\dbsrv16.exe: [Debugger] fixmapi.exe
IFEO\dcsrv.exe: [Debugger] fixmapi.exe
IFEO\debugger: [Debugger] fixmapi.exe
IFEO\Defender.exe: [Debugger] fixmapi.exe
IFEO\DefenderDaemon.exe: [Debugger] fixmapi.exe
IFEO\DefWatch.exe: [Debugger] fixmapi.exe
IFEO\DEKSTOP LOCKER.exe: [Debugger] fixmapi.exe
IFEO\DELTEMP.EXE: [Debugger] fixmapi.exe
IFEO\dep360.exe: [Debugger] fixmapi.exe
IFEO\DeskLock.exe: [Debugger] fixmapi.exe
IFEO\Desktop Locker.exe: [Debugger] fixmapi.exe
IFEO\DesktopPlus64.exe: [Debugger] fixmapi.exe
IFEO\Desktop_Locker: [Debugger] fixmapi.exe
IFEO\devencl.exe: [Debugger] fixmapi.exe
IFEO\dlhost.exe: [Debugger] fixmapi.exe
IFEO\dll32.exe: [Debugger] fixmapi.exe
IFEO\DLLREPAIR.EXE: [Debugger] fixmapi.exe
IFEO\DLRLOGO.EXE: [Debugger] fixmapi.exe
IFEO\dmdjmg.exe: [Debugger] fixmapi.exe
IFEO\dmhelpserver.exe: [Debugger] fixmapi.exe
IFEO\DNTPService.exe: [Debugger] fixmapi.exe
IFEO\Domino.exe: [Debugger] fixmapi.exe
IFEO\DOWNLOAD.EXE: [Debugger] fixmapi.exe
IFEO\Dr.Web.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\dragon_updater.exe: [Debugger] fixmapi.exe
IFEO\DriverBooster.exe: [Debugger] fixmapi.exe
IFEO\Drop Box Update.exe: [Debugger] fixmapi.exe
IFEO\DrSDKCaller.exe: [Debugger] fixmapi.exe
IFEO\drw343F.tmp.exe: [Debugger] fixmapi.exe
IFEO\drwcsd.exe: [Debugger] fixmapi.exe
IFEO\DrWeb.exe: [Debugger] fixmapi.exe
IFEO\drweb32w.exe: [Debugger] fixmapi.exe
IFEO\drwebupw.exe: [Debugger] fixmapi.exe
IFEO\drw_remover.exe: [Debugger] fixmapi.exe
IFEO\dsrviml.exe: [Debugger] fixmapi.exe
IFEO\dsweb.exe: [Debugger] drmsvc.exe
IFEO\DTLEP.exe: [Debugger] fixmapi.exe
IFEO\DU20B9.EXE: [Debugger] fixmapi.exe
IFEO\DUB8.2.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\DUBrute-v8.1.exe: [Debugger] fixmapi.exe
IFEO\DUBrute.2.2.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\DUBrute.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\DUMeter.exe: [Debugger] fixmapi.exe
IFEO\DUMeterSvc.exe: [Debugger] fixmapi.exe
IFEO\dumpnet.exe: [Debugger] fixmapi.exe
IFEO\DVCONFIG.EXE: [Debugger] fixmapi.exe
IFEO\DVINST.EXE: [Debugger] fixmapi.exe
IFEO\DVPOPUP.EXE: [Debugger] fixmapi.exe
IFEO\dwantispam.exe: [Debugger] fixmapi.exe
IFEO\dwarkdaemon.exe: [Debugger] fixmapi.exe
IFEO\dwengine.exe: [Debugger] fixmapi.exe
IFEO\DWHWizrd.exe: [Debugger] fixmapi.exe
IFEO\dwmr.exe: [Debugger] fixmapi.exe
IFEO\dwnetfilter.exe: [Debugger] fixmapi.exe
IFEO\dwscanner.exe: [Debugger] fixmapi.exe
IFEO\dwservice.exe: [Debugger] fixmapi.exe
IFEO\dwwatcher.exe: [Debugger] fixmapi.exe
IFEO\dwwin.exe: [Debugger] fixmapi.exe
IFEO\ECLNR.EXE: [Debugger] fixmapi.exe
IFEO\econceal.exe: [Debugger] fixmapi.exe
IFEO\econser.exe: [Debugger] fixmapi.exe
IFEO\edpa.exe: [Debugger] fixmapi.exe
IFEO\eeCtrl.exe: [Debugger] fixmapi.exe
IFEO\eEmpty.exe: [Debugger] fixmapi.exe
IFEO\egui.exe: [Debugger] fixmapi.exe
IFEO\elogsvc.exe: [Debugger] fixmapi.exe
IFEO\EMAILSCN.EXE: [Debugger] fixmapi.exe
IFEO\EmailSpider.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\emlproxy.exe: [Debugger] fixmapi.exe
IFEO\Endpoint Agent Tray.exe: [Debugger] fixmapi.exe
IFEO\endpointintegration.exe: [Debugger] fixmapi.exe
IFEO\endpointservice.exe: [Debugger] fixmapi.exe
IFEO\EngineServer.exe: [Debugger] fixmapi.exe
IFEO\EnterpriseConsole.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\EnterpriseService.exe: [Debugger] fixmapi.exe
IFEO\EnterpriseUpdate.exe: [Debugger] fixmapi.exe
IFEO\EnterpriseUpdateService.exe: [Debugger] fixmapi.exe
IFEO\EOSNotify.exe: [Debugger] fixmapi.exe
IFEO\epag.exe: [Debugger] fixmapi.exe
IFEO\epconsole.exe: [Debugger] fixmapi.exe
IFEO\epintegrationservice.exe: [Debugger] fixmapi.exe
IFEO\epprotectedservice.exe: [Debugger] fixmapi.exe
IFEO\epsecurityservice.exe: [Debugger] fixmapi.exe
IFEO\epupdateservice.exe: [Debugger] fixmapi.exe
IFEO\ERAAgent.exe: [Debugger] fixmapi.exe
IFEO\ErrorCheck.exe: [Debugger] fixmapi.exe
IFEO\ErrorsChecking.exe: [Debugger] fixmapi.exe
IFEO\ERUNT2.EXE: [Debugger] fixmapi.exe
IFEO\escanmon.exe: [Debugger] fixmapi.exe
IFEO\escanpro.exe: [Debugger] fixmapi.exe
IFEO\ESERV.EXE: [Debugger] fixmapi.exe
IFEO\esetonlinescanner.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\esetonlinescanner_enu.exe: [Debugger] fixmapi.exe
IFEO\esetonlinescanner_sky.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\ESETPoweliksCleaner.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\eset_antivirus.exe: [Debugger] fixmapi.exe
IFEO\EShaSrv.exe: [Debugger] fixmapi.exe
IFEO\esif.exe: [Debugger] fixmapi.exe
IFEO\ess.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\EthDcrMiner64.exe: [Debugger] fixmapi.exe
IFEO\Everything.exe: [Debugger] fixmapi.exe
IFEO\EverythingServer.exe: [Debugger] fixmapi.exe
IFEO\evmgr.exe: [Debugger] fixmapi.exe
IFEO\EXCLUDE.EXE: [Debugger] fixmapi.exe
IFEO\exe.exe: [Debugger] fixmapi.exe
IFEO\EXECSCAN.EXE: [Debugger] fixmapi.exe
IFEO\explores.exe: [Debugger] fixmapi.exe
IFEO\expmon.exe: [Debugger] fixmapi.exe
IFEO\fcag.exe: [Debugger] fixmapi.exe
IFEO\fcags.exe: [Debugger] fixmapi.exe
IFEO\fcagswd.exe: [Debugger] fixmapi.exe
IFEO\fcagte.exe: [Debugger] fixmapi.exe
IFEO\fcappdb.exe: [Debugger] fixmapi.exe
IFEO\FCDBLog.exe: [Debugger] fixmapi.exe
IFEO\FCHelper64.exe: [Debugger] fixmapi.exe
IFEO\FCWscD7.exe: [Debugger] fixmapi.exe
IFEO\Fiddlere.exe: [Debugger] fixmapi.exe
IFEO\FIH32.exe: [Debugger] fixmapi.exe
IFEO\FireSvc.exe: [Debugger] fixmapi.exe
IFEO\firewall_rules.exe: [Debugger] fixmapi.exe
IFEO\FIXDLL.EXE: [Debugger] fixmapi.exe
IFEO\FIXL2M.EXE: [Debugger] fixmapi.exe
IFEO\fixmapi.exe: [Debugger] fixmapi.exe
IFEO\Fjabo.exe: [Debugger] fixmapi.exe
IFEO\fkirsk.exe: [Debugger] fixmapi.exe
IFEO\fmefsh.exe: [Debugger] fixmapi.exe
IFEO\fmefss.exe: [Debugger] fixmapi.exe
IFEO\fmon.exe: [Debugger] fixmapi.exe
IFEO\fmsh.exe: [Debugger] fixmapi.exe
IFEO\fmss.exe: [Debugger] fixmapi.exe
IFEO\FNRB32.exe: [Debugger] fixmapi.exe
IFEO\ForcerX+__.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\ForServiceApp.exe: [Debugger] fixmapi.exe
IFEO\FortiClient.exe: [Debugger] fixmapi.exe
IFEO\FortiESNAC.exe: [Debugger] fixmapi.exe
IFEO\fortifw.exe: [Debugger] fixmapi.exe
IFEO\fortifws.exe: [Debugger] fixmapi.exe
IFEO\FortiProxy.exe: [Debugger] fixmapi.exe
IFEO\FortiSettings.exe: [Debugger] fixmapi.exe
IFEO\FortiSSLVPNdaemon.exe: [Debugger] fixmapi.exe
IFEO\FortiTray.exe: [Debugger] fixmapi.exe
IFEO\FortiWF.exe: [Debugger] fixmapi.exe
IFEO\FPAVServer.exe: [Debugger] fixmapi.exe
IFEO\FProtTray.exe: [Debugger] fixmapi.exe
IFEO\FrameworkService.exe: [Debugger] fixmapi.exe
IFEO\frdpb_v2.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\frog.exe: [Debugger] fixmapi.exe
IFEO\frwl_notify.exe: [Debugger] fixmapi.exe
IFEO\frwl_svc.exe: [Debugger] fixmapi.exe
IFEO\fsaua.exe: [Debugger] fixmapi.exe
IFEO\fsav32.exe: [Debugger] fixmapi.exe
IFEO\fsdevcon.exe: [Debugger] fixmapi.exe
IFEO\fsdevcon64.exe: [Debugger] fixmapi.exe
IFEO\fsdfwd.exe: [Debugger] fixmapi.exe
IFEO\fsgk32.exe: [Debugger] fixmapi.exe
IFEO\FSGK32ST.exe: [Debugger] fixmapi.exe
IFEO\FSHDLL32.EXE: [Debugger] fixmapi.exe
IFEO\FSHDLL64.EXE: [Debugger] fixmapi.exe
IFEO\fshoster32.exe: [Debugger] fixmapi.exe
IFEO\fshoster64.exe: [Debugger] fixmapi.exe
IFEO\FSM32.EXE: [Debugger] fixmapi.exe
IFEO\FSMA32.EXE: [Debugger] fixmapi.exe
IFEO\fsorsp.exe: [Debugger] fixmapi.exe
IFEO\fsorsp64.exe: [Debugger] fixmapi.exe
IFEO\fspmsservice.exe: [Debugger] fixmapi.exe
IFEO\fsproflt.exe: [Debugger] fixmapi.exe
IFEO\fsproflt2.exe: [Debugger] fixmapi.exe
IFEO\fsscoepl_x64.exe: [Debugger] fixmapi.exe
IFEO\FSSEND.EXE: [Debugger] fixmapi.exe
IFEO\fssm32.exe: [Debugger] fixmapi.exe
IFEO\fsulprothoster.exe: [Debugger] fixmapi.exe
IFEO\fswebuid.exe: [Debugger] fixmapi.exe
IFEO\fud15.exe: [Debugger] fixmapi.exe
IFEO\fud16.exe: [Debugger] fixmapi.exe
IFEO\fwnrww.exe: [Debugger] fixmapi.exe
IFEO\g2.exe: [Debugger] fixmapi.exe
IFEO\gcclient.exe: [Debugger] fixmapi.exe
IFEO\GDFirewallTray.exe: [Debugger] fixmapi.exe
IFEO\GDFwSvc.exe: [Debugger] fixmapi.exe
IFEO\GDSC.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\GDScan.exe: [Debugger] fixmapi.exe
IFEO\GeekBuddyRSP.exe: [Debugger] fixmapi.exe
IFEO\getsusp.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\getsusp64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\GlassWire.exe: [Debugger] fixmapi.exe
IFEO\GMBLOCKR.EXE: [Debugger] fixmapi.exe
IFEO\Go.EXE: [Debugger] fixmapi.exe
IFEO\gotopbr.exe: [Debugger] fixmapi.exe
IFEO\gsam.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\GSUI.EXE: [Debugger] fixmapi.exe
IFEO\GSUIT.EXE: [Debugger] fixmapi.exe
IFEO\Gui.exe: [Debugger] fixmapi.exe
IFEO\GWCtlSrv.exe: [Debugger] fixmapi.exe
IFEO\GWIdlMon.exe: [Debugger] fixmapi.exe
IFEO\gy.exe: [Debugger] fixmapi.exe
IFEO\GZIP.EXE: [Debugger] fixmapi.exe
IFEO\hale.exe: [Debugger] fixmapi.exe
IFEO\Hboqu.exe: [Debugger] fixmapi.exe
IFEO\HDRUC.EXE: [Debugger] fixmapi.exe
IFEO\Health.exe: [Debugger] fixmapi.exe
IFEO\Heartbeat.exe: [Debugger] fixmapi.exe
IFEO\Heimdal.Agent.exe: [Debugger] fixmapi.exe
IFEO\Heimdal.AgentLoader.exe: [Debugger] fixmapi.exe
IFEO\Heimdal.ClientHost.exe: [Debugger] fixmapi.exe
IFEO\Heimdal.SecureDNS.exe: [Debugger] fixmapi.exe
IFEO\help.exe: [Debugger] fixmapi.exe
IFEO\helper.exe: [Debugger] fixmapi.exe
IFEO\HipMgmt.exe: [Debugger] fixmapi.exe
IFEO\hitleap-viewer-browser.exe: [Debugger] fixmapi.exe
IFEO\hitleap-viewer.exe: [Debugger] fixmapi.exe
IFEO\HitmanPro x64.exe: [Debugger] fixmapi.exe
IFEO\hkcmd.exe: [Debugger] fixmapi.exe
IFEO\Hkufhbj.exe: [Debugger] fixmapi.exe
IFEO\hmac.exe: [Debugger] fixmapi.exe
IFEO\hmpalert.exe: [Debugger] fixmapi.exe
IFEO\HomeVnService.exe: [Debugger] fixmapi.exe
IFEO\host32.exe: [Debugger] fixmapi.exe
IFEO\hostdl.exe: [Debugger] fixmapi.exe
IFEO\HostedAgent.exe: [Debugger] fixmapi.exe
IFEO\HostStore.exe: [Debugger] fixmapi.exe
IFEO\HostXmrig.exe: [Debugger] fixmapi.exe
IFEO\HpSrv.exe: [Debugger] fixmapi.exe
IFEO\hpssmhd.exe: [Debugger] fixmapi.exe
IFEO\hscangui.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\HS_Svc.exe: [Debugger] fixmapi.exe
IFEO\icarus.exe: [Debugger] fixmapi.exe
IFEO\iCRCService.exe: [Debugger] fixmapi.exe
IFEO\icsys.icn.exe: [Debugger] fixmapi.exe
IFEO\iddlen.exe: [Debugger] fixmapi.exe
IFEO\igateway.exe: [Debugger] fixmapi.exe
IFEO\iimaia.exe: [Debugger] fixmapi.exe
IFEO\IMF.exe: [Debugger] fixmapi.exe
IFEO\IMFsrv.exe: [Debugger] fixmapi.exe
IFEO\IMFSrvWsc.exe: [Debugger] fixmapi.exe
IFEO\IMFTips.exe: [Debugger] fixmapi.exe
IFEO\indexer.exe: [Debugger] fixmapi.exe
IFEO\INETFIX.EXE: [Debugger] fixmapi.exe
IFEO\ingloca.exe: [Debugger] fixmapi.exe
IFEO\InjectWinSockServiceV3.exe: [Debugger] fixmapi.exe
IFEO\InoRPC.exe: [Debugger] fixmapi.exe
IFEO\InoRT.exe: [Debugger] fixmapi.exe
IFEO\InoTask.exe: [Debugger] fixmapi.exe
IFEO\InstantSupport.exe: [Debugger] fixmapi.exe
IFEO\INSTEXEC.EXE: [Debugger] fixmapi.exe
IFEO\INSTSOFT.EXE: [Debugger] fixmapi.exe
IFEO\instup.exe: [Debugger] fixmapi.exe
IFEO\Intelme.exe: [Debugger] fixmapi.exe
IFEO\Interl thesaurus service.exe: [Debugger] fixmapi.exe
IFEO\IObit Malware Fighter.exe: [Debugger] fixmapi.exe
IFEO\IObitUninstaler.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\IOCNTRL.exe: [Debugger] fixmapi.exe
IFEO\IProtectorService.exe: [Debugger] fixmapi.exe
IFEO\iptray.exe: [Debugger] fixmapi.exe
IFEO\ipts.exe: [Debugger] fixmapi.exe
IFEO\ipz.exe: [Debugger] fixmapi.exe
IFEO\ipz2.exe: [Debugger] fixmapi.exe
IFEO\Isass.exe: [Debugger] fixmapi.exe
IFEO\isesrv.exe: [Debugger] fixmapi.exe
IFEO\isvw-agent.exe: [Debugger] fixmapi.exe
IFEO\isvw-ftp.exe: [Debugger] fixmapi.exe
IFEO\isvw-http.exe: [Debugger] fixmapi.exe
IFEO\isvw-main.exe: [Debugger] fixmapi.exe
IFEO\isvw-pop3.exe: [Debugger] fixmapi.exe
IFEO\isvw-scan.exe: [Debugger] fixmapi.exe
IFEO\isvw-smtp.exe: [Debugger] fixmapi.exe
IFEO\isvw-svr.exe: [Debugger] fixmapi.exe
IFEO\isvw-webui.exe: [Debugger] fixmapi.exe
IFEO\ITbrain_AntiMalware_Service.exe: [Debugger] fixmapi.exe
IFEO\ium.exe: [Debugger] fixmapi.exe
IFEO\javacs.exe: [Debugger] fixmapi.exe
IFEO\Javagroup.exe: [Debugger] fixmapi.exe
IFEO\Javaj.exe: [Debugger] fixmapi.exe
IFEO\javal.exe: [Debugger] fixmapi.exe
IFEO\JavaUpdater.exe: [Debugger] fixmapi.exe
IFEO\jingling.exe: [Debugger] fixmapi.exe
IFEO\jixlea.exe: [Debugger] fixmapi.exe
IFEO\jozruq.exe: [Debugger] fixmapi.exe
IFEO\jusched.exe: [Debugger] fixmapi.exe
IFEO\Juyhrd.exe: [Debugger] fixmapi.exe
IFEO\K7CrvSvc.exe: [Debugger] fixmapi.exe
IFEO\k7emlpxy.exe: [Debugger] fixmapi.exe
IFEO\k7fwsrvc.exe: [Debugger] fixmapi.exe
IFEO\k7pssrvc.exe: [Debugger] fixmapi.exe
IFEO\k7rtscan.exe: [Debugger] fixmapi.exe
IFEO\K7SysMon.Exe: [Debugger] fixmapi.exe
IFEO\k7tsecurity.exe: [Debugger] fixmapi.exe
IFEO\k7tshlpr.exe: [Debugger] fixmapi.exe
IFEO\k7tsmngr.exe: [Debugger] fixmapi.exe
IFEO\K7TSReminder.exe: [Debugger] fixmapi.exe
IFEO\KasAVSrv.exe: [Debugger] fixmapi.exe
IFEO\KasperskyCleaner.exe: [Debugger] fixmapi.exe
IFEO\kavfs.exe: [Debugger] fixmapi.exe
IFEO\kavfsgt.exe: [Debugger] fixmapi.exe
IFEO\kavfsscs.exe: [Debugger] fixmapi.exe
IFEO\kavfswh.exe: [Debugger] fixmapi.exe
IFEO\kavfswp.exe: [Debugger] fixmapi.exe
IFEO\kavremover.exe: [Debugger] fixmapi.exe
IFEO\kavtray.exe: [Debugger] fixmapi.exe
IFEO\kes_win.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\Kfdwunx.exe: [Debugger] fixmapi.exe
IFEO\KILLALL.EXE: [Debugger] fixmapi.exe
IFEO\klactprx.exe: [Debugger] fixmapi.exe
IFEO\klakaut.exe: [Debugger] fixmapi.exe
IFEO\klcfginst.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\klcsweb.exe: [Debugger] fixmapi.exe
IFEO\klnagent.exe: [Debugger] fixmapi.exe
IFEO\klserver.exe: [Debugger] fixmapi.exe
IFEO\klvk.exe: [Debugger] fixmapi.exe
IFEO\KMS-R@1n.exe: [Debugger] fixmapi.exe
IFEO\KMS-R@1nHook.exe: [Debugger] fixmapi.exe
IFEO\KPortScan3.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\kryptex.exe: [Debugger] fixmapi.exe
IFEO\kryptex7.exe: [Debugger] fixmapi.exe
IFEO\KSafeTray.exe: [Debugger] fixmapi.exe
IFEO\ksde.exe: [Debugger] fixmapi.exe
IFEO\ksdeui.exe: [Debugger] fixmapi.exe
IFEO\ksnproxy.exe: [Debugger] fixmapi.exe
IFEO\KSP.exe: [Debugger] fixmapi.exe
IFEO\KU.EXE: [Debugger] fixmapi.exe
IFEO\KvMonXP.exe: [Debugger] fixmapi.exe
IFEO\kvpncsvc.exe: [Debugger] fixmapi.exe
IFEO\KVRT.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\lamescan3.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\LANCARDENUMERATOR.EXE: [Debugger] fixmapi.exe
IFEO\lass.exe: [Debugger] fixmapi.exe
IFEO\launch.exe: [Debugger] fixmapi.exe
IFEO\launcher_service.exe: [Debugger] fixmapi.exe
IFEO\less.exe: [Debugger] fixmapi.exe
IFEO\LiveUpdate360.exe: [Debugger] fixmapi.exe
IFEO\LoadStat.exe: [Debugger] fixmapi.exe
IFEO\loggingserver.exe: [Debugger] fixmapi.exe
IFEO\Logo.exe: [Debugger] fixmapi.exe
IFEO\logWriter.exe: [Debugger] fixmapi.exe
IFEO\log_qtine.exe: [Debugger] fixmapi.exe
IFEO\LP.exe: [Debugger] fixmapi.exe
IFEO\lsaoss.exe: [Debugger] fixmapi.exe
IFEO\lsasss.exe: [Debugger] fixmapi.exe
IFEO\lsasvc.exe: [Debugger] fixmapi.exe
IFEO\lsm.exe: [Debugger] fixmapi.exe
IFEO\lsmosee.exe: [Debugger] fixmapi.exe
IFEO\lsynchost.exe: [Debugger] fixmapi.exe
IFEO\LUALL.EXE: [Debugger] fixmapi.exe
IFEO\LuCallbackProxy.exe: [Debugger] fixmapi.exe
IFEO\LUCOMS~1.EXE: [Debugger] fixmapi.exe
IFEO\luppwq.exe: [Debugger] fixmapi.exe
IFEO\LWCSService.exe: [Debugger] fixmapi.exe
IFEO\macmnsvc.exe: [Debugger] fixmapi.exe
IFEO\macompatsvc.exe: [Debugger] fixmapi.exe
IFEO\MailCracker.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\MAILDISP.EXE: [Debugger] fixmapi.exe
IFEO\MAILGEN.EXE: [Debugger] fixmapi.exe
IFEO\MAILGEN2.EXE: [Debugger] fixmapi.exe
IFEO\mailscan.exe: [Debugger] fixmapi.exe
IFEO\MALSCAN.EXE: [Debugger] fixmapi.exe
IFEO\MalwareProtectionClient.exe: [Debugger] fixmapi.exe
IFEO\ManagedAntivirus.exe: [Debugger] fixmapi.exe
IFEO\ManagementAgentNT.exe: [Debugger] fixmapi.exe
IFEO\mark.exe: [Debugger] fixmapi.exe
IFEO\massscan_launcher.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\masvc.exe: [Debugger] fixmapi.exe
IFEO\MB3Service.exe: [Debugger] fixmapi.exe
IFEO\mbae-svc.exe: [Debugger] fixmapi.exe
IFEO\mbae.exe: [Debugger] fixmapi.exe
IFEO\mbae64.exe: [Debugger] fixmapi.exe
IFEO\mbam.exe: [Debugger] fixmapi.exe
IFEO\mbamgui.exe: [Debugger] fixmapi.exe
IFEO\mbamscheduler.exe: [Debugger] fixmapi.exe
IFEO\MBAMService.exe: [Debugger] fixmapi.exe
IFEO\mbamtray.exe: [Debugger] fixmapi.exe
IFEO\mbarw.exe: [Debugger] fixmapi.exe
IFEO\MBEspoll.exe: [Debugger] fixmapi.exe
IFEO\McAfee Safe Connect.exe: [Debugger] fixmapi.exe
IFEO\McAfee.TrueKey.Service.exe: [Debugger] fixmapi.exe
IFEO\McAfee.TrueKey.ServiceHelper.exe: [Debugger] fixmapi.exe
IFEO\MCAFEE~2.EXE: [Debugger] fixmapi.exe
IFEO\mcagent.exe: [Debugger] fixmapi.exe
IFEO\McAPExe.exe: [Debugger] fixmapi.exe
IFEO\McCHSvc.exe: [Debugger] fixmapi.exe
IFEO\McClientAnalytics.exe: [Debugger] fixmapi.exe
IFEO\McClnUI.exe: [Debugger] fixmapi.exe
IFEO\mcconsol.exe: [Debugger] fixmapi.exe
IFEO\McCSPServiceHost.exe: [Debugger] fixmapi.exe
IFEO\mchost.exe: [Debugger] fixmapi.exe
IFEO\McInst.exe: [Debugger] fixmapi.exe
IFEO\mcLi.exe: [Debugger] fixmapi.exe
IFEO\mcods.exe: [Debugger] fixmapi.exe
IFEO\MCPR.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\McPvTray.exe: [Debugger] fixmapi.exe
IFEO\McSACore.exe: [Debugger] fixmapi.exe
IFEO\McsAgent.exe: [Debugger] fixmapi.exe
IFEO\McsClient.exe: [Debugger] fixmapi.exe
IFEO\McScript_InUse.exe: [Debugger] fixmapi.exe
IFEO\mcshield.exe: [Debugger] fixmapi.exe
IFEO\MCSTRT.EXE: [Debugger] fixmapi.exe
IFEO\McSvHost.exe: [Debugger] fixmapi.exe
IFEO\mctelsvc.exe: [Debugger] fixmapi.exe
IFEO\McTkSchedulerService.exe: [Debugger] fixmapi.exe
IFEO\McTray.exe: [Debugger] fixmapi.exe
IFEO\McUICnt.exe: [Debugger] fixmapi.exe
IFEO\mcuihost.exe: [Debugger] fixmapi.exe
IFEO\mcupdate.exe: [Debugger] fixmapi.exe
IFEO\mcupdmgr.exe: [Debugger] fixmapi.exe
IFEO\McVsMap.exe: [Debugger] fixmapi.exe
IFEO\McVsShld.exe: [Debugger] fixmapi.exe
IFEO\McVulAlert.exe: [Debugger] fixmapi.exe
IFEO\McVulCtr.exe: [Debugger] fixmapi.exe
IFEO\mdagent.exe: [Debugger] fixmapi.exe
IFEO\mf40nt.exe: [Debugger] fixmapi.exe
IFEO\mfeann.exe: [Debugger] fixmapi.exe
IFEO\mfeatp.exe: [Debugger] fixmapi.exe
IFEO\MfeAVSvc.exe: [Debugger] fixmapi.exe
IFEO\mfecanary.exe: [Debugger] fixmapi.exe
IFEO\mfeesp.exe: [Debugger] fixmapi.exe
IFEO\mfefire.exe: [Debugger] fixmapi.exe
IFEO\mfemactl.exe: [Debugger] fixmapi.exe
IFEO\mfemms.exe: [Debugger] fixmapi.exe
IFEO\mfetp.exe: [Debugger] fixmapi.exe
IFEO\mfevtps.exe: [Debugger] fixmapi.exe
IFEO\mfewc.exe: [Debugger] fixmapi.exe
IFEO\MicroMiner.exe: [Debugger] fixmapi.exe
IFEO\Microsoft.exe: [Debugger] fixmapi.exe
IFEO\MicrosoftEdgeCP.exe: [Debugger] fixmapi.exe
IFEO\MicrosoftPage.exe: [Debugger] fixmapi.exe
IFEO\Mineos.exe: [Debugger] fixmapi.exe
IFEO\Miner.exe: [Debugger] fixmapi.exe
IFEO\miner65.exe: [Debugger] fixmapi.exe
IFEO\minerd.exe: [Debugger] fixmapi.exe
IFEO\minerd_cp_fr.exe: [Debugger] fixmapi.exe
IFEO\minerd_dp_com.exe: [Debugger] fixmapi.exe
IFEO\minergate-cli.exe: [Debugger] fixmapi.exe
IFEO\minergate-service.exe: [Debugger] fixmapi.exe
IFEO\minergate.exe: [Debugger] fixmapi.exe
IFEO\mine_cp.exe: [Debugger] fixmapi.exe
IFEO\mine_mx.exe: [Debugger] fixmapi.exe
IFEO\mmon32.exe: [Debugger] fixmapi.exe
IFEO\MMSSHOST.exe: [Debugger] fixmapi.exe
IFEO\ModuleCoreService.exe: [Debugger] fixmapi.exe
IFEO\MonApp.exe: [Debugger] fixmapi.exe
IFEO\MONITOR.EXE: [Debugger] fixmapi.exe
IFEO\Mouse Lock.exe: [Debugger] fixmapi.exe
IFEO\Mouse Lock_v22.exe: [Debugger] fixmapi.exe
IFEO\MpCmdRun.exe: [Debugger] fixmapi.exe
IFEO\MPK.exe: [Debugger] fixmapi.exe
IFEO\MpkL64.exe: [Debugger] fixmapi.exe
IFEO\MpUXSrv.exe: [Debugger] fixmapi.exe
IFEO\mqsgmo.exe: [Debugger] fixmapi.exe
IFEO\mqtgcvc.exe: [Debugger] fixmapi.exe
IFEO\mqtgmsvc.exe: [Debugger] fixmapi.exe
IFEO\Mrolsmc.exe: [Debugger] fixmapi.exe
IFEO\MRT-KB890830.exe: [Debugger] fixmapi.exe
IFEO\MRT.exe: [Debugger] fixmapi.exe
IFEO\msapp.exe: [Debugger] fixmapi.exe
IFEO\MSASCui.exe: [Debugger] fixmapi.exe
IFEO\MSASCuiL.exe: [Debugger] fixmapi.exe
IFEO\msbtce.exe: [Debugger] fixmapi.exe
IFEO\mscnhlp2.exe: [Debugger] fixmapi.exe
IFEO\Mscvin.exe: [Debugger] fixmapi.exe
IFEO\msdcsc.exe: [Debugger] fixmapi.exe
IFEO\msdts.exe: [Debugger] fixmapi.exe
IFEO\MSG.EXE: [Debugger] fixmapi.exe
IFEO\MSGSYS.EXE: [Debugger] fixmapi.exe
IFEO\msinfo.exe: [Debugger] fixmapi.exe
IFEO\MsMpEng.exe: [Debugger] fixmapi.exe
IFEO\msmvp.exe: [Debugger] fixmapi.exe
IFEO\msoia.exe: [Debugger] fixmapi.exe
IFEO\msrtn32.exe: [Debugger] fixmapi.exe
IFEO\mssecsvc.exe: [Debugger] fixmapi.exe
IFEO\MsSense.exe: [Debugger] fixmapi.exe
IFEO\mssm-xsc.exe: [Debugger] fixmapi.exe
IFEO\MSSysCtl.exe: [Debugger] fixmapi.exe
IFEO\MtxHotPlugService.exe: [Debugger] fixmapi.exe
IFEO\MusicsPlayers.exe: [Debugger] fixmapi.exe
IFEO\MvtApp.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\MWAGENT.EXE: [Debugger] fixmapi.exe
IFEO\MWASER.EXE: [Debugger] fixmapi.exe
IFEO\mwavscan.com: [Debugger] fixmapi.exe
IFEO\mweshield.exe: [Debugger] fixmapi.exe
IFEO\MWExpertSystem.exe: [Debugger] fixmapi.exe
IFEO\mworker.exe: [Debugger] fixmapi.exe
IFEO\mwse.exe: [Debugger] fixmapi.exe
IFEO\mwueum.exe: [Debugger] fixmapi.exe
IFEO\myAgtSvc.exe: [Debugger] fixmapi.exe
IFEO\mysqld.exe: [Debugger] fixmapi.exe
IFEO\N360.exe: [Debugger] fixmapi.exe
IFEO\N360ChkServ.exe: [Debugger] fixmapi.exe
IFEO\NableAVDBridge.exe: [Debugger] fixmapi.exe
IFEO\NableReactiveManagement.exe: [Debugger] fixmapi.exe
IFEO\NableSixtyFourBitManager.exe: [Debugger] fixmapi.exe
IFEO\NableUpdateService.exe: [Debugger] fixmapi.exe
IFEO\NAC.exe: [Debugger] fixmapi.exe
IFEO\NAIlgpip.exe: [Debugger] fixmapi.exe
IFEO\nam.exe: [Debugger] fixmapi.exe
IFEO\naPrdMgr.exe: [Debugger] fixmapi.exe
IFEO\native.exe: [Debugger] fixmapi.exe
IFEO\NCPROTECT.EXE: [Debugger] fixmapi.exe
IFEO\ndisqsbr.exe: [Debugger] fixmapi.exe
IFEO\NetFramework.exe: [Debugger] fixmapi.exe
IFEO\NetGoodBar.exe: [Debugger] fixmapi.exe
IFEO\nethtsrv.exe: [Debugger] fixmapi.exe
IFEO\NetLibrary.exe: [Debugger] fixmapi.exe
IFEO\NetMonitor.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\netsrv.exe: [Debugger] fixmapi.exe
IFEO\netsvc.exe: [Debugger] fixmapi.exe
IFEO\NetTimeService.exe: [Debugger] fixmapi.exe
IFEO\NetTraffic.exe: [Debugger] fixmapi.exe
IFEO\netupdsrv.exe: [Debugger] fixmapi.exe
IFEO\network-app.exe: [Debugger] fixmapi.exe
IFEO\network-update.exe: [Debugger] fixmapi.exe
IFEO\networx.exe: [Debugger] fixmapi.exe
IFEO\nheqminer.exe: [Debugger] fixmapi.exe
IFEO\NiceHashMiner.exe: [Debugger] fixmapi.exe
IFEO\Nip.exe: [Debugger] fixmapi.exe
IFEO\nis.exe: [Debugger] fixmapi.exe
IFEO\NisSrv.exe: [Debugger] fixmapi.exe
IFEO\Njeeves.exe: [Debugger] fixmapi.exe
IFEO\NL.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\Nlas.exe: [Debugger] fixmapi.exe
IFEO\NLBrute 1.2 x64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\NLBrute 1.2.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\NLBrute.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\NLBrute1.2.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\NmService.exe: [Debugger] fixmapi.exe
IFEO\NmTaskTray.exe: [Debugger] fixmapi.exe
IFEO\NmWebService.exe: [Debugger] fixmapi.exe
IFEO\nortonsecurity.exe: [Debugger] fixmapi.exe
IFEO\nosstarter.npe: [Debugger] fixmapi.exe
IFEO\nossvc.exe: [Debugger] fixmapi.exe
IFEO\NPACCHAT.EXE: [Debugger] fixmapi.exe
IFEO\NPAV4.EXE: [Debugger] fixmapi.exe
IFEO\NPAVSHIELD.EXE: [Debugger] fixmapi.exe
IFEO\NPCREMOTE.EXE: [Debugger] fixmapi.exe
IFEO\NPDVE.EXE: [Debugger] fixmapi.exe
IFEO\NPHOST.EXE: [Debugger] fixmapi.exe
IFEO\NPPROT.EXE: [Debugger] fixmapi.exe
IFEO\NPQRTMGR.EXE: [Debugger] fixmapi.exe
IFEO\ns.exe: [Debugger] fixmapi.exe
IFEO\nsbu.exe: [Debugger] fixmapi.exe
IFEO\NsCpuapl.exe: [Debugger] fixmapi.exe
IFEO\NsCpuCNMiner.exe: [Debugger] fixmapi.exe
IFEO\NsCpuCNMiner32.exe: [Debugger] fixmapi.exe
IFEO\NsCpuCNMiner64.exe: [Debugger] fixmapi.exe
IFEO\NscTop.exe: [Debugger] fixmapi.exe
IFEO\Nsesvc.exe: [Debugger] fixmapi.exe
IFEO\nsl.exe: [Debugger] fixmapi.exe
IFEO\NSM.EXE: [Debugger] fixmapi.exe
IFEO\nssm.exe: [Debugger] fixmapi.exe
IFEO\nsvc.exe: [Debugger] fixmapi.exe
IFEO\nsWscSvc.exe: [Debugger] fixmapi.exe
IFEO\NTBLKCFG.EXE: [Debugger] fixmapi.exe
IFEO\NTBSS.EXE: [Debugger] fixmapi.exe
IFEO\NTRtScan.exe: [Debugger] fixmapi.exe
IFEO\NTTacP.EXE: [Debugger] fixmapi.exe
IFEO\nusb3mon.exe: [Debugger] fixmapi.exe
IFEO\nvnc.exe: [Debugger] fixmapi.exe
IFEO\nvstreamsvc.exe: [Debugger] fixmapi.exe
IFEO\nvsvc32.exe: [Debugger] fixmapi.exe
IFEO\nwscknript.exe: [Debugger] fixmapi.exe
IFEO\NXI.EXE: [Debugger] fixmapi.exe
IFEO\OfcAoSMgr.exe: [Debugger] fixmapi.exe
IFEO\OfcDog.exe: [Debugger] fixmapi.exe
IFEO\OfcLogReceiverSvc.exe: [Debugger] fixmapi.exe
IFEO\OfcPfwSvc.exe: [Debugger] fixmapi.exe
IFEO\OfcService.exe: [Debugger] fixmapi.exe
IFEO\OMNetworkService.exe: [Debugger] fixmapi.exe
IFEO\ONLINENT.EXE: [Debugger] fixmapi.exe
IFEO\OOSU10.exe: [Debugger] fixmapi.exe
IFEO\OpenHardwareMonitor.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\OPSSVC.EXE: [Debugger] fixmapi.exe
IFEO\opswat_20170728_x64_2.exe: [Debugger] fixmapi.exe
IFEO\op_mon.exe: [Debugger] fixmapi.exe
IFEO\OSCEIntegrationService.exe: [Debugger] fixmapi.exe
IFEO\OSFIRWAL.EXE: [Debugger] fixmapi.exe
IFEO\OSFPOPUP.EXE: [Debugger] fixmapi.exe
IFEO\OSFSHIELD.EXE: [Debugger] fixmapi.exe
IFEO\Outbreak.exe: [Debugger] fixmapi.exe
IFEO\PadFSvr.exe: [Debugger] fixmapi.exe
IFEO\Pagent.exe: [Debugger] fixmapi.exe
IFEO\Pagentwd.exe: [Debugger] fixmapi.exe
IFEO\panbss.exe: [Debugger] fixmapi.exe
IFEO\Panda_URL_Filtering.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\PanGPA.exe: [Debugger] fixmapi.exe
IFEO\PanGPS.exe: [Debugger] fixmapi.exe
IFEO\Pastebin Spider.exe: [Debugger] fixmapi.exe
IFEO\PaSvc.exe: [Debugger] fixmapi.exe
IFEO\PASystemTray.exe: [Debugger] fixmapi.exe
IFEO\patch-manifest-synchronizer.exe: [Debugger] fixmapi.exe
IFEO\patch-scanner.exe: [Debugger] fixmapi.exe
IFEO\PaTray.exe: [Debugger] fixmapi.exe
IFEO\PAUI.exe: [Debugger] fixmapi.exe
IFEO\Pauscher.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\PavBckPT.exe: [Debugger] fixmapi.exe
IFEO\PAvDCExc.exe: [Debugger] fixmapi.exe
IFEO\PAvEx.exe: [Debugger] fixmapi.exe
IFEO\PavFnSvr.exe: [Debugger] fixmapi.exe
IFEO\PavPrSrv.exe: [Debugger] fixmapi.exe
IFEO\pavsched.exe: [Debugger] fixmapi.exe
IFEO\pavsrvx86.exe: [Debugger] fixmapi.exe
IFEO\PavTest.exe: [Debugger] fixmapi.exe
IFEO\payload.exe: [Debugger] fixmapi.exe
IFEO\PccNT.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\PccNTMon.exe: [Debugger] fixmapi.exe
IFEO\pccntupd.exe: [Debugger] fixmapi.exe
IFEO\PCloudCleaner.exe: [Debugger] fixmapi.exe
IFEO\PEFService.exe: [Debugger] fixmapi.exe
IFEO\PESTRUCT.EXE: [Debugger] fixmapi.exe
IFEO\pex.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\Photo.scr: [Debugger] fixmapi.exe
IFEO\ph_exec.exe: [Debugger] fixmapi.exe
IFEO\player.exe: [Debugger] fixmapi.exe
IFEO\Plugin.exe: [Debugger] fixmapi.exe
IFEO\pos.exe: [Debugger] fixmapi.exe
IFEO\pr.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\praetorian.exe: [Debugger] fixmapi.exe
IFEO\PremiumRemoteAgent.exe: [Debugger] fixmapi.exe
IFEO\PremiumRemoteAgentMonitor.exe: [Debugger] fixmapi.exe
IFEO\PremiumRemoteAgentService.exe: [Debugger] fixmapi.exe
IFEO\pricefountainw.exe: [Debugger] fixmapi.exe
IFEO\PRINFO.EXE: [Debugger] fixmapi.exe
IFEO\PRINFO64.EXE: [Debugger] fixmapi.exe
IFEO\Private Keeper.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\prkiller.exe: [Debugger] fixmapi.exe
IFEO\PROCDISP.EXE: [Debugger] fixmapi.exe
IFEO\Process Explorer.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\PROCESSDISPATCHER.EXE: [Debugger] fixmapi.exe
IFEO\ProcessHacker.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\PROCESSRECORDER.EXE: [Debugger] fixmapi.exe
IFEO\PROCESSSCANNER.EXE: [Debugger] fixmapi.exe
IFEO\procexp.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\procexp64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\Procmon.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\Procmon64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\ProductAgentService.exe: [Debugger] fixmapi.exe
IFEO\Project1.exe: [Debugger] fixmapi.exe
IFEO\PromoUtil.exe: [Debugger] fixmapi.exe
IFEO\prtest.exe: [Debugger] fixmapi.exe
IFEO\PRTG Traffic Grapher.exe: [Debugger] fixmapi.exe
IFEO\prtgwatchdog.exe: [Debugger] fixmapi.exe
IFEO\PSANHost.exe: [Debugger] fixmapi.exe
IFEO\PsCtrlC.exe: [Debugger] fixmapi.exe
IFEO\PsCtrlS.exe: [Debugger] fixmapi.exe
IFEO\PSExAnPrc.exe: [Debugger] fixmapi.exe
IFEO\PSExAnSvc.exe: [Debugger] fixmapi.exe
IFEO\PSExMngr.exe: [Debugger] fixmapi.exe
IFEO\PSHost.exe: [Debugger] fixmapi.exe
IFEO\psimreal.exe: [Debugger] fixmapi.exe
IFEO\PsImSvc.exe: [Debugger] fixmapi.exe
IFEO\psksvc.exe: [Debugger] fixmapi.exe
IFEO\PSROL.exe: [Debugger] fixmapi.exe
IFEO\PSUAMain.exe: [Debugger] fixmapi.exe
IFEO\PSUAService.exe: [Debugger] fixmapi.exe
IFEO\PSUNMain.exe: [Debugger] fixmapi.exe
IFEO\PtSessionAgent.exe: [Debugger] fixmapi.exe
IFEO\PtSvcHost.exe: [Debugger] fixmapi.exe
IFEO\PtWatchDog.exe: [Debugger] fixmapi.exe
IFEO\Q.exe: [Debugger] fixmapi.exe
IFEO\QHAccount.exe: [Debugger] fixmapi.exe
IFEO\QHActiveDefense.exe: [Debugger] fixmapi.exe
IFEO\QHActiveSecurity.exe: [Debugger] fixmapi.exe
IFEO\QHFileSmasher.exe: [Debugger] fixmapi.exe
IFEO\qhpisvr.exe: [Debugger] fixmapi.exe
IFEO\QHSafeMain.exe: [Debugger] fixmapi.exe
IFEO\QHSafeTray.exe: [Debugger] fixmapi.exe
IFEO\QHWatchdog.exe: [Debugger] fixmapi.exe
IFEO\qimlsrv.exe: [Debugger] fixmapi.exe
IFEO\Qleda.exe: [Debugger] fixmapi.exe
IFEO\qpis.exe: [Debugger] fixmapi.exe
IFEO\QpMonitor.exe: [Debugger] fixmapi.exe
IFEO\QQExternal.exe: [Debugger] fixmapi.exe
IFEO\QQLiveService.exe: [Debugger] fixmapi.exe
IFEO\QQProtect.exe: [Debugger] fixmapi.exe
IFEO\QtWebEngineProcess.exe: [Debugger] fixmapi.exe
IFEO\quhlpsvc.exe: [Debugger] fixmapi.exe
IFEO\QuikProtect.exe: [Debugger] fixmapi.exe
IFEO\raes.exe: [Debugger] fixmapi.exe
IFEO\RDP Brute_Cracked.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\RDP Recognizer.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\RDPSS.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\rdpthread.exe: [Debugger] fixmapi.exe
IFEO\rdrleakdag.exe: [Debugger] fixmapi.exe
IFEO\Realmon.exe: [Debugger] fixmapi.exe
IFEO\Rebel Botnet.exe: [Debugger] fixmapi.exe
IFEO\redsurf.exe: [Debugger] fixmapi.exe
IFEO\REGBKPNT.EXE: [Debugger] fixmapi.exe
IFEO\REGREST.EXE: [Debugger] fixmapi.exe
IFEO\regsvr.exe: [Debugger] fixmapi.exe
IFEO\REGSYSTE.EXE: [Debugger] fixmapi.exe
IFEO\REMIND.EXE: [Debugger] fixmapi.exe
IFEO\reminder.exe: [Debugger] fixmapi.exe
IFEO\REMOTEPER.EXE: [Debugger] fixmapi.exe
IFEO\RENAMEONREBOOT.EXE: [Debugger] fixmapi.exe
IFEO\ReporterSvc.exe: [Debugger] fixmapi.exe
IFEO\REPRSVC.EXE: [Debugger] fixmapi.exe
IFEO\restarter_x64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\rett.exe: [Debugger] fixmapi.exe
IFEO\revshow.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\RFP.EXE: [Debugger] fixmapi.exe
IFEO\rfusclient.exe: [Debugger] fixmapi.exe
IFEO\RK-SCAN.EXE: [Debugger] fixmapi.exe
IFEO\rkfree.exe: [Debugger] fixmapi.exe
IFEO\RKK.EXE: [Debugger] fixmapi.exe
IFEO\RKKF.EXE: [Debugger] fixmapi.exe
IFEO\ROMFUSClient.exe: [Debugger] fixmapi.exe
IFEO\romserver.exe: [Debugger] fixmapi.exe
IFEO\rootkitremover.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\rotatelogs.exe: [Debugger] fixmapi.exe
IFEO\RouterNT.exe: [Debugger] fixmapi.exe
IFEO\RouterScan.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\rrdxllrl.exe: [Debugger] fixmapi.exe
IFEO\rsLggr.exe: [Debugger] fixmapi.exe
IFEO\RSMWinService.exe: [Debugger] fixmapi.exe
IFEO\rthdcpd.exe: [Debugger] fixmapi.exe
IFEO\rtop_bg.exe: [Debugger] fixmapi.exe
IFEO\rtop_svc.exe: [Debugger] fixmapi.exe
IFEO\Rtvscan.exe: [Debugger] fixmapi.exe
IFEO\RUNSCAN.EXE: [Debugger] fixmapi.exe
IFEO\rutserv.exe: [Debugger] fixmapi.exe
IFEO\rvlkl.exe: [Debugger] fixmapi.exe
IFEO\saappsvc.exe: [Debugger] fixmapi.exe
IFEO\safesurf.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\saHookMain.exe: [Debugger] fixmapi.exe
IFEO\sanotifier.exe: [Debugger] fixmapi.exe
IFEO\sapissvc.exe: [Debugger] fixmapi.exe
IFEO\SAPPZMN.EXE: [Debugger] fixmapi.exe
IFEO\sascansvc.exe: [Debugger] fixmapi.exe
IFEO\SASCORE.EXE: [Debugger] fixmapi.exe
IFEO\SASCORE64.EXE: [Debugger] fixmapi.exe
IFEO\saUI.exe: [Debugger] fixmapi.exe
IFEO\SAVAdminService.exe: [Debugger] fixmapi.exe
IFEO\SavService.exe: [Debugger] fixmapi.exe
IFEO\SBAMSvc.exe: [Debugger] fixmapi.exe
IFEO\SBAMTray.exe: [Debugger] fixmapi.exe
IFEO\sbamui.exe: [Debugger] fixmapi.exe
IFEO\SBPIMSvc.exe: [Debugger] fixmapi.exe
IFEO\scan32.exe: [Debugger] fixmapi.exe
IFEO\SCANNER.EXE: [Debugger] fixmapi.exe
IFEO\SCANWSCS.EXE: [Debugger] fixmapi.exe
IFEO\scclient.exe: [Debugger] fixmapi.exe
IFEO\SCComm.exe: [Debugger] fixmapi.exe
IFEO\sched.exe: [Debugger] fixmapi.exe
IFEO\scheduler.exe: [Debugger] fixmapi.exe
IFEO\SCPROXYSRV.EXE: [Debugger] fixmapi.exe
IFEO\ScriptHelper.exe: [Debugger] fixmapi.exe
IFEO\scriptrap.exe: [Debugger] fixmapi.exe
IFEO\SCRNSHT.EXE: [Debugger] fixmapi.exe
IFEO\scrss.exe: [Debugger] fixmapi.exe
IFEO\ScSecSvc.exe: [Debugger] fixmapi.exe
IFEO\SCSTDISP.EXE: [Debugger] fixmapi.exe
IFEO\SCTCleanupService.exe: [Debugger] fixmapi.exe
IFEO\sdcservice.exe: [Debugger] fixmapi.exe
IFEO\SDFSSvc.exe: [Debugger] fixmapi.exe
IFEO\sdhelp.exe: [Debugger] fixmapi.exe
IFEO\SDRootAlyzer.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDRService.exe: [Debugger] fixmapi.exe
IFEO\SDScan.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDShell.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDShred.exe: [Debugger] fixmapi.exe
IFEO\SDSysRepair.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDTools.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDTray.exe: [Debugger] fixmapi.exe
IFEO\SDUpdate.exe: [Debugger] fixmapi.exe
IFEO\SDUpdSvc.exe: [Debugger] fixmapi.exe
IFEO\SDWelcome.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SDWSCSvc.exe: [Debugger] fixmapi.exe
IFEO\Search.exe: [Debugger] fixmapi.exe
IFEO\SearchProtocolHos.exe: [Debugger] fixmapi.exe
IFEO\seccenter.exe: [Debugger] fixmapi.exe
IFEO\SecHealthUI.exe: [Debugger] fixmapi.exe
IFEO\secscan.exe: [Debugger] fixmapi.exe
IFEO\SecureAPlus.exe: [Debugger] fixmapi.exe
IFEO\SecureAPlusService.exe: [Debugger] fixmapi.exe
IFEO\SecureAPlusUI.exe: [Debugger] fixmapi.exe
IFEO\securesurf.browser.client.exe: [Debugger] fixmapi.exe
IFEO\Security.exe: [Debugger] fixmapi.exe
IFEO\SecurityHealthService.exe: [Debugger] fixmapi.exe
IFEO\SecurityHealthSystray.exe: [Debugger] fixmapi.exe
IFEO\SecurityScan_Release.exe: [Debugger] fixmapi.exe
IFEO\SecurityService.exe: [Debugger] fixmapi.exe
IFEO\SEDService.exe: [Debugger] fixmapi.exe
IFEO\SemLaunchSvc.exe: [Debugger] fixmapi.exe
IFEO\SemSvc.exe: [Debugger] fixmapi.exe
IFEO\SENDREPO.EXE: [Debugger] fixmapi.exe
IFEO\SenseCncProxy.exe: [Debugger] fixmapi.exe
IFEO\SEPAgent.exe: [Debugger] fixmapi.exe
IFEO\server.dat: [Debugger] fixmapi.exe
IFEO\Service.exe: [Debugger] fixmapi.exe
IFEO\ServiceApp.exe: [Debugger] fixmapi.exe
IFEO\servicess.exe: [Debugger] fixmapi.exe
IFEO\servidor.exe: [Debugger] fixmapi.exe
IFEO\sessmgr.exe: [Debugger] fixmapi.exe
IFEO\setap_c.exe: [Debugger] fixmapi.exe
IFEO\seth.exe: [Debugger] drmsvc.exe
IFEO\SetupAv.exe: [Debugger] fixmapi.exe
IFEO\setupbeta.exe: [Debugger] fixmapi.exe
IFEO\setup_av_ep.exe: [Debugger] fixmapi.exe
IFEO\setup_kes.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\SFAUpdater.exe: [Debugger] fixmapi.exe
IFEO\sfc.exe: [Debugger] fixmapi.exe
IFEO\sgbider.exe: [Debugger] fixmapi.exe
IFEO\SH4Service.exe: [Debugger] fixmapi.exe
IFEO\SHDLRLOGO.EXE: [Debugger] fixmapi.exe
IFEO\ShieldStart.exe: [Debugger] fixmapi.exe
IFEO\ShKernel.exe: [Debugger] fixmapi.exe
IFEO\shost.exe: [Debugger] fixmapi.exe
IFEO\shstat.exe: [Debugger] fixmapi.exe
IFEO\sitehelp.exe: [Debugger] fixmapi.exe
IFEO\skrolls.exe: [Debugger] fixmapi.exe
IFEO\skying.exe: [Debugger] fixmapi.exe
IFEO\SLOWLAN.EXE: [Debugger] fixmapi.exe
IFEO\SmadavProtect32.exe: [Debugger] fixmapi.exe
IFEO\smartscreen.exe: [Debugger] fixmapi.exe
IFEO\smBootTime.exe: [Debugger] fixmapi.exe
IFEO\Smc.exe: [Debugger] fixmapi.exe
IFEO\smcc.exe: [Debugger] fixmapi.exe
IFEO\SmcGui.exe: [Debugger] fixmapi.exe
IFEO\SmcService.exe: [Debugger] fixmapi.exe
IFEO\smetts.exe: [Debugger] fixmapi.exe
IFEO\smsdefrag.exe: [Debugger] fixmapi.exe
IFEO\smss.exe: [Debugger] fixmapi.exe
IFEO\smssm.exe: [Debugger] fixmapi.exe
IFEO\smsss.exe: [Debugger] fixmapi.exe
IFEO\smss_x86.exe: [Debugger] fixmapi.exe
IFEO\snetcfg.exe: [Debugger] fixmapi.exe
IFEO\snmptrap.exe: [Debugger] fixmapi.exe
IFEO\sntlkeyssrvr.exe: [Debugger] fixmapi.exe
IFEO\sntlsrtsrvr.exe: [Debugger] fixmapi.exe
IFEO\SntpService.exe: [Debugger] fixmapi.exe
IFEO\SoftMgrLite.exe: [Debugger] fixmapi.exe
IFEO\SoftupNotify.exe: [Debugger] fixmapi.exe
IFEO\SombraLock.exe: [Debugger] fixmapi.exe
IFEO\Sophos UI.exe: [Debugger] fixmapi.exe
IFEO\SophosClean.exe: [Debugger] fixmapi.exe
IFEO\SophosCleanM.exe: [Debugger] fixmapi.exe
IFEO\SophosFileScanner.exe: [Debugger] fixmapi.exe
IFEO\SophosFIMService.exe: [Debugger] fixmapi.exe
IFEO\SophosFS.exe: [Debugger] fixmapi.exe
IFEO\SophosHealth.exe: [Debugger] fixmapi.exe
IFEO\SophosNtpService.exe: [Debugger] fixmapi.exe
IFEO\SophosSafestore64.exe: [Debugger] fixmapi.exe
IFEO\soqkci.exe: [Debugger] fixmapi.exe
IFEO\sound.exe: [Debugger] fixmapi.exe
IFEO\SPBBCSvc.exe: [Debugger] fixmapi.exe
IFEO\spideragent.exe: [Debugger] fixmapi.exe
IFEO\spideragent_adm.exe: [Debugger] fixmapi.exe
IFEO\spidergate.exe: [Debugger] fixmapi.exe
IFEO\spiderml.exe: [Debugger] fixmapi.exe
IFEO\splwowc.exe: [Debugger] fixmapi.exe
IFEO\spm.exe: [Debugger] fixmapi.exe
IFEO\spnsrvnt.exe: [Debugger] fixmapi.exe
IFEO\spols.exe: [Debugger] fixmapi.exe
IFEO\spomua.exe: [Debugger] fixmapi.exe
IFEO\spooIsv.exe: [Debugger] fixmapi.exe
IFEO\spooler.exe: [Debugger] fixmapi.exe
IFEO\spools.exe: [Debugger] fixmapi.exe
IFEO\spoolv.exe: [Debugger] fixmapi.exe
IFEO\spoolvs.exe: [Debugger] fixmapi.exe
IFEO\Spred.exe: [Debugger] fixmapi.exe
IFEO\spsvc.exe: [Debugger] fixmapi.exe
IFEO\SpybotSD.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\spydetector323eng.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\SpyHunter4.exe: [Debugger] fixmapi.exe
IFEO\SpyHunter5.exe: [Debugger] fixmapi.exe
IFEO\spywareblaster.exe: [Debugger] fixmapi.exe
IFEO\SQLSystem.exe: [Debugger] fixmapi.exe
IFEO\squid.exe: [Debugger] fixmapi.exe
IFEO\srcver.exe: [Debugger] fixmapi.exe
IFEO\SRFeature.exe: [Debugger] fixmapi.exe
IFEO\SRManager.exe: [Debugger] fixmapi.exe
IFEO\srs.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\srs.exe.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\SRService.exe: [Debugger] fixmapi.exe
IFEO\srvan.exe: [Debugger] fixmapi.exe
IFEO\Srvc_RBTransactionService.exe: [Debugger] fixmapi.exe
IFEO\SrvLoad.exe: [Debugger] fixmapi.exe
IFEO\ssDVAgent.exe: [Debugger] fixmapi.exe
IFEO\ssms32.exe: [Debugger] fixmapi.exe
IFEO\ssp.exe: [Debugger] fixmapi.exe
IFEO\SSPService.exe: [Debugger] fixmapi.exe
IFEO\ssrs.exe: [Debugger] fixmapi.exe
IFEO\SSScheduler.exe: [Debugger] fixmapi.exe
IFEO\ssvchost.exe: [Debugger] fixmapi.exe
IFEO\ssyncer.exe: [Debugger] fixmapi.exe
IFEO\starter_avp.exe: [Debugger] fixmapi.exe
IFEO\StartupChecker.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\StartupCheckingService.exe: [Debugger] fixmapi.exe
IFEO\StartUpTool_w.exe: [Debugger] fixmapi.exe
IFEO\Steam.exe: [Debugger] fixmapi.exe
IFEO\steamwebhelper.exe: [Debugger] fixmapi.exe
IFEO\stinger.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\storectrl.dll: [Debugger] fixmapi.exe
IFEO\StSess.exe: [Debugger] fixmapi.exe
IFEO\StSess32.exe: [Debugger] fixmapi.exe
IFEO\stub.exe: [Debugger] fixmapi.exe
IFEO\SUI.EXE: [Debugger] fixmapi.exe
IFEO\Suo12_StartupManager.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\SUPERANTISPYWARE.EXE: [Debugger] fixmapi.exe
IFEO\surfblock.exe: [Debugger] fixmapi.exe
IFEO\surfguard.exe: [Debugger] fixmapi.exe
IFEO\suvnrm.exe: [Debugger] fixmapi.exe
IFEO\svbhost.exe: [Debugger] fixmapi.exe
IFEO\svcGenericHost.exe: [Debugger] fixmapi.exe
IFEO\svch0st.exe: [Debugger] fixmapi.exe
IFEO\svchobst.exe: [Debugger] fixmapi.exe
IFEO\svchoct.exe: [Debugger] fixmapi.exe
IFEO\svchos.exe: [Debugger] fixmapi.exe
IFEO\svchosd.exe: [Debugger] fixmapi.exe
IFEO\svchose.exe: [Debugger] fixmapi.exe
IFEO\svchost.com: [Debugger] fixmapi.exe
IFEO\svchost.dll: [Debugger] fixmapi.exe
IFEO\SVCHOST.SCR: [Debugger] fixmapi.exe
IFEO\svchost32.exe: [Debugger] fixmapi.exe
IFEO\svchosts.exe: [Debugger] fixmapi.exe
IFEO\svchots.exe: [Debugger] fixmapi.exe
IFEO\svchsoo.exe: [Debugger] fixmapi.exe
IFEO\svchsot.exe: [Debugger] fixmapi.exe
IFEO\svcnoct.exe: [Debugger] fixmapi.exe
IFEO\svcohst.exe: [Debugger] fixmapi.exe
IFEO\svdhost.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\svehost.exe: [Debugger] fixmapi.exe
IFEO\svhosr.exe: [Debugger] fixmapi.exe
IFEO\svhost.exe: [Debugger] fixmapi.exe
IFEO\svncxhost.exe: [Debugger] fixmapi.exe
IFEO\svnhost.exe: [Debugger] fixmapi.exe
IFEO\SVRTcli.exe: [Debugger] fixmapi.exe
IFEO\SVRTgui.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SVRTservice.exe: [Debugger] fixmapi.exe
IFEO\svshost.exe: [Debugger] fixmapi.exe
IFEO\svsrv.exe: [Debugger] fixmapi.exe
IFEO\swAgent.exe: [Debugger] fixmapi.exe
IFEO\swc_service.exe: [Debugger] fixmapi.exe
IFEO\swdoctor.exe: [Debugger] fixmapi.exe
IFEO\swi_fc.exe: [Debugger] fixmapi.exe
IFEO\swi_filter.exe: [Debugger] fixmapi.exe
IFEO\swi_service.exe: [Debugger] fixmapi.exe
IFEO\Symantec AntiVirus.exe: [Debugger] fixmapi.exe
IFEO\symerr.exe: [Debugger] fixmapi.exe
IFEO\SymRedistributable.exe: [Debugger] fixmapi.exe
IFEO\sys.exe: [Debugger] fixmapi.exe
IFEO\sys32.exe: [Debugger] fixmapi.exe
IFEO\sysdisk.exe: [Debugger] fixmapi.exe
IFEO\sysdown.exe: [Debugger] fixmapi.exe
IFEO\syshost.exe: [Debugger] fixmapi.exe
IFEO\SysInspector.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\System Idle Process.exe: [Debugger] fixmapi.exe
IFEO\system.exe: [Debugger] fixmapi.exe
IFEO\System32.exe: [Debugger] fixmapi.exe
IFEO\system64: [Debugger] fixmapi.exe
IFEO\system64.exe: [Debugger] fixmapi.exe
IFEO\SystemDriveHost.exe: [Debugger] fixmapi.exe
IFEO\SystemExplorer.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\SystemF0D7.exe: [Debugger] fixmapi.exe
IFEO\SystemHost.exe: [Debugger] fixmapi.exe
IFEO\SystemIDLE.exe: [Debugger] fixmapi.exe
IFEO\SystemNT.exe: [Debugger] fixmapi.exe
IFEO\SystemSetting.exe: [Debugger] fixmapi.exe
IFEO\systemsmss.exe: [Debugger] fixmapi.exe
IFEO\SystemTask.exe: [Debugger] fixmapi.exe
IFEO\SystemTaskinfo.exe: [Debugger] fixmapi.exe
IFEO\systemx.exe: [Debugger] fixmapi.exe
IFEO\Systms.exe: [Debugger] fixmapi.exe
IFEO\Systmss.exe: [Debugger] fixmapi.exe
IFEO\systrays.exe: [Debugger] fixmapi.exe
IFEO\szndesktop.exe: [Debugger] fixmapi.exe
IFEO\taschost.exe: [Debugger] fixmapi.exe
IFEO\task.exe: [Debugger] fixmapi.exe
IFEO\taskhostw.exe: [Debugger] fixmapi.exe
IFEO\TaskManagerService.exe: [Debugger] fixmapi.exe
IFEO\taskmgrr.exe: [Debugger] fixmapi.exe
IFEO\Taskmrg.exe: [Debugger] fixmapi.exe
IFEO\Tasksmgrs.exe: [Debugger] fixmapi.exe
IFEO\TbViewer.exe: [Debugger] fixmapi.exe
IFEO\tcpscvs.exe: [Debugger] fixmapi.exe
IFEO\tcpvcon.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\Tcpview.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\netframework.vbs
IFEO\tcpzaw.exe: [Debugger] fixmapi.exe
IFEO\TeaTimer.exe: [Debugger] fixmapi.exe
IFEO\Terms.EXE: [Debugger] fixmapi.exe
IFEO\Terms.EXE.exe: [Debugger] fixmapi.exe
IFEO\THGuard.exe: [Debugger] fixmapi.exe
IFEO\TIASPN~1.EXE: [Debugger] fixmapi.exe
IFEO\TINY.EXE: [Debugger] fixmapi.exe
IFEO\TMBMSRV.exe: [Debugger] fixmapi.exe
IFEO\TmCCSF.exe: [Debugger] fixmapi.exe
IFEO\TmListen.exe: [Debugger] fixmapi.exe
IFEO\tmmt.exe: [Debugger] fixmapi.exe
IFEO\tmmt64.exe: [Debugger] fixmapi.exe
IFEO\tmPfw.exe: [Debugger] fixmapi.exe
IFEO\TmProxy.exe: [Debugger] fixmapi.exe
IFEO\TmsaInstance32.exe: [Debugger] fixmapi.exe
IFEO\ToolbarUpdater.exe: [Debugger] fixmapi.exe
IFEO\ToolbarUpdaterService.exe: [Debugger] fixmapi.exe
IFEO\TotalAV.exe: [Debugger] fixmapi.exe
IFEO\TpmInit.exe: [Debugger] fixmapi.exe
IFEO\tps.exe: [Debugger] fixmapi.exe
IFEO\TrafAdmin.exe: [Debugger] fixmapi.exe
IFEO\TrafInsp.exe: [Debugger] fixmapi.exe
IFEO\TrafInspRep.exe: [Debugger] fixmapi.exe
IFEO\TrafMonitor.exe: [Debugger] fixmapi.exe
IFEO\TrafSvc.exe: [Debugger] fixmapi.exe
IFEO\traycser.exe: [Debugger] fixmapi.exe
IFEO\trayeser.exe: [Debugger] fixmapi.exe
IFEO\TRAYICOC.EXE: [Debugger] fixmapi.exe
IFEO\TRAYICOS.EXE: [Debugger] fixmapi.exe
IFEO\traysser.exe: [Debugger] fixmapi.exe
IFEO\Trjscan.exe: [Debugger] fixmapi.exe
IFEO\TROJSCN.EXE: [Debugger] fixmapi.exe
IFEO\TrueImageMonitor.exe: [Debugger] fixmapi.exe
IFEO\TSC.exe: [Debugger] fixmapi.exe
IFEO\turbomailer.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\runtime.vbs
IFEO\uacdumpsystem.exe: [Debugger] fixmapi.exe
IFEO\uamApp.exe: [Debugger] fixmapi.exe
IFEO\uamAppWOW.exe: [Debugger] fixmapi.exe
IFEO\UdaterUI.exe: [Debugger] fixmapi.exe
IFEO\UI0detect.exe: [Debugger] fixmapi.exe
IFEO\uiSeAgnt.exe: [Debugger] fixmapi.exe
IFEO\uistub.exe: [Debugger] fixmapi.exe
IFEO\uiWatchDog.exe: [Debugger] fixmapi.exe
IFEO\uiWinMgr.exe: [Debugger] fixmapi.exe
IFEO\umngrsvc.exe: [Debugger] fixmapi.exe
IFEO\uninst.exe: [Debugger] fixmapi.exe
IFEO\Uninstaler_SkipUac.exe: [Debugger] fixmapi.exe
IFEO\UninstallMonitor.exe: [Debugger] fixmapi.exe
IFEO\unit.exe: [Debugger] fixmapi.exe
IFEO\unit_manager.exe: [Debugger] fixmapi.exe
IFEO\UniversalAVService.exe: [Debugger] fixmapi.exe
IFEO\unlinkd.exe: [Debugger] fixmapi.exe
IFEO\UNZIP.EXE: [Debugger] fixmapi.exe
IFEO\Up2date.exe: [Debugger] fixmapi.exe
IFEO\updata.exe: [Debugger] fixmapi.exe
IFEO\update-api.exe: [Debugger] fixmapi.exe
IFEO\update-app.exe: [Debugger] fixmapi.exe
IFEO\UpdaterUI.exe: [Debugger] fixmapi.exe
IFEO\updateservice.exe: [Debugger] fixmapi.exe
IFEO\updatesrv.exe: [Debugger] fixmapi.exe
IFEO\UPX.EXE: [Debugger] fixmapi.exe
IFEO\USBGuard.exe: [Debugger] fixmapi.exe
IFEO\USBKeyerTools.exe: [Debugger] fixmapi.exe
IFEO\USBSRService.exe: [Debugger] fixmapi.exe
IFEO\V2011.exe: [Debugger] fixmapi.exe
IFEO\V3Clinic.exe: [Debugger] fixmapi.exe
IFEO\V3Lite.exe: [Debugger] fixmapi.exe
IFEO\V3SP.exe: [Debugger] fixmapi.exe
IFEO\V3Svc.exe: [Debugger] fixmapi.exe
IFEO\v3ui.exe: [Debugger] fixmapi.exe
IFEO\vapm.exe: [Debugger] fixmapi.exe
IFEO\VC90.exe: [Debugger] fixmapi.exe
IFEO\VCScanEng.exe: [Debugger] fixmapi.exe
IFEO\vcsvc.exe: [Debugger] fixmapi.exe
IFEO\vcsvcc.exe: [Debugger] fixmapi.exe
IFEO\VCTray.exe: [Debugger] fixmapi.exe
IFEO\vdcss.exe: [Debugger] fixmapi.exe
IFEO\vercls.exe: [Debugger] fixmapi.exe
IFEO\Vip Slow.exe: [Debugger] fixmapi.exe
IFEO\VIRCLEANER.EXE: [Debugger] fixmapi.exe
IFEO\VIRITSVC.EXE: [Debugger] fixmapi.exe
IFEO\vkise.exe: [Debugger] fixmapi.exe
IFEO\vmms.exe: [Debugger] fixmapi.exe
IFEO\vmsnap3.exe: [Debugger] fixmapi.exe
IFEO\vmware-converter.exe: [Debugger] fixmapi.exe
IFEO\vnchosts.exe: [Debugger] fixmapi.exe
IFEO\volumedisk.exe: [Debugger] fixmapi.exe
IFEO\vpc32.exe: [Debugger] fixmapi.exe
IFEO\vprot.exe: [Debugger] fixmapi.exe
IFEO\vptray.exe: [Debugger] fixmapi.exe
IFEO\vsmon.exe: [Debugger] fixmapi.exe
IFEO\vsserv.exe: [Debugger] fixmapi.exe
IFEO\vsservppl.exe: [Debugger] fixmapi.exe
IFEO\VsTskMgr.exe: [Debugger] fixmapi.exe
IFEO\VVUDFHost.exe: [Debugger] fixmapi.exe
IFEO\waagent.exe: [Debugger] ctfmon.exe
IFEO\wab32.exe: [Debugger] fixmapi.exe
IFEO\wahiver.exe: [Debugger] fixmapi.exe
IFEO\wahiver64.exe: [Debugger] fixmapi.exe
IFEO\WAHost.exe: [Debugger] fixmapi.exe
IFEO\wasp.exe: [Debugger] fixmapi.exe
IFEO\Wasppacer.exe: [Debugger] ipz.exe
IFEO\waspwing.exe: [Debugger] fixmapi.exe
IFEO\wasub.exe: [Debugger] fixmapi.exe
IFEO\wbox.exe: [Debugger] fixmapi.exe
IFEO\wdp.exe: [Debugger] fixmapi.exe
IFEO\webengineDHA.exe: [Debugger] fixmapi.exe
IFEO\webisida.browser.exe: [Debugger] fixmapi.exe
IFEO\WEBPROT.EXE: [Debugger] fixmapi.exe
IFEO\WebProtectorPlus.exe: [Debugger] fixmapi.exe
IFEO\WebProxy.exe: [Debugger] fixmapi.exe
IFEO\webtmr.exe: [Debugger] fixmapi.exe
IFEO\wfc.exe: [Debugger] fixmapi.exe
IFEO\wfcs.exe: [Debugger] fixmapi.exe
IFEO\WHOUSES.EXE: [Debugger] fixmapi.exe
IFEO\win-active.exe: [Debugger] fixmapi.exe
IFEO\win-api.exe: [Debugger] fixmapi.exe
IFEO\win-app.exe: [Debugger] fixmapi.exe
IFEO\win-update.exe: [Debugger] fixmapi.exe
IFEO\win32.exe: [Debugger] fixmapi.exe
IFEO\winamp.exe: [Debugger] fixmapi.exe
IFEO\WinApp.exe: [Debugger] fixmapi.exe
IFEO\WinAuto.com: [Debugger] fixmapi.exe
IFEO\WinCtrProc.exe: [Debugger] fixmapi.exe
IFEO\windefender.exe: [Debugger] fixmapi.exe
IFEO\windir.exe: [Debugger] fixmapi.exe
IFEO\windows nt.exe: [Debugger] fixmapi.exe
IFEO\Windows-KB890830-x64-V5.58.exe: [Debugger] fixmapi.exe
IFEO\windows.exe: [Debugger] fixmapi.exe
IFEO\Windows10Upgrade.exe: [Debugger] fixmapi.exe
IFEO\Windows10UpgraderApp.exe: [Debugger] fixmapi.exe
IFEO\WindowsUpdate.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\windrvs.exe: [Debugger] fixmapi.exe
IFEO\windrws.exe: [Debugger] fixmapi.exe
IFEO\winer.exe: [Debugger] fixmapi.exe
IFEO\winfhuco.exe: [Debugger] fixmapi.exe
IFEO\WinHide.exe: [Debugger] fixmapi.exe
IFEO\WinHide.SB.exe: [Debugger] fixmapi.exe
IFEO\winhost.exe: [Debugger] fixmapi.exe
IFEO\winhvbs.exe: [Debugger] fixmapi.exe
IFEO\winidow.exe: [Debugger] fixmapi.exe
IFEO\winiggn.exe: [Debugger] fixmapi.exe
IFEO\winIogon.exe: [Debugger] fixmapi.exe
IFEO\winlgxxg.exe: [Debugger] fixmapi.exe
IFEO\winlock.exe: [Debugger] fixmapi.exe
IFEO\winlog.exe: [Debugger] fixmapi.exe
IFEO\winlogn.exe: [Debugger] fixmapi.exe
IFEO\winlogon.exe(1): [Debugger] fixmapi.exe
IFEO\winlogon.exe.exe: [Debugger] fixmapi.exe
IFEO\winlogon4.exe: [Debugger] fixmapi.exe
IFEO\winlogon64.exe: [Debugger] fixmapi.exe
IFEO\winlogons.exe: [Debugger] fixmapi.exe
IFEO\winlogs.exe: [Debugger] fixmapi.exe
IFEO\winmgmnt: [Debugger] fixmapi.exe
IFEO\winmgmnt.exe: [Debugger] fixmapi.exe
IFEO\winmhjqkn.exe: [Debugger] fixmapi.exe
IFEO\winmm.exe: [Debugger] fixmapi.exe
IFEO\winmyfqfv.exe: [Debugger] fixmapi.exe
IFEO\WinPatrol.exe: [Debugger] fixmapi.exe
IFEO\winpoint.exe: [Debugger] fixmapi.exe
IFEO\winqndkm.exe: [Debugger] fixmapi.exe
IFEO\WinSvchost.exe: [Debugger] fixmapi.exe
IFEO\winsys.exe: [Debugger] fixmapi.exe
IFEO\WinSys_Monitor.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\wintmr.exe: [Debugger] fixmapi.exe
IFEO\winup.exe: [Debugger] fixmapi.exe
IFEO\winypbdd.exe: [Debugger] fixmapi.exe
IFEO\Win_Updater.exe: [Debugger] fixmapi.exe
IFEO\Wiswqcs.exe: [Debugger] fixmapi.exe
IFEO\wizard.exe: [Debugger] fixmapi.exe
IFEO\wmiapsvr.exe: [Debugger] fixmapi.exe
IFEO\WMIC.exe.exe: [Debugger] fixmapi.exe
IFEO\WmiPSrv.exe: [Debugger] fixmapi.exe
IFEO\wmpenc_st.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\wnhelp.exe: [Debugger] fixmapi.exe
IFEO\Wpeka.exe: [Debugger] fixmapi.exe
IFEO\Wprehwc.exe: [Debugger] fixmapi.exe
IFEO\wqscmc.exe: [Debugger] fixmapi.exe
IFEO\WRSA.exe: [Debugger] fixmapi.exe
IFEO\wsb.exe: [Debugger] fixmapi.exe
IFEO\WSCStatusController.exe: [Debugger] fixmapi.exe
IFEO\wsp.exe: [Debugger] fixmapi.exe
IFEO\WSPMaint.exe: [Debugger] fixmapi.exe
IFEO\wssfcmai.exe: [Debugger] fixmapi.exe
IFEO\wtssvc.exe: [Debugger] fixmapi.exe
IFEO\WtuSystemSupport.exe: [Debugger] fixmapi.exe
IFEO\wuauclm.exe: [Debugger] fixmapi.exe
IFEO\wuauclt.exe: [Debugger] fixmapi.exe
IFEO\wuaudt.exe: [Debugger] fixmapi.exe
IFEO\wuauser.exe: [Debugger] fixmapi.exe
IFEO\WUDFHost.exe: [Debugger] fixmapi.exe
IFEO\wwmeeg.exe: [Debugger] fixmapi.exe
IFEO\x64.exe: [Debugger] fixmapi.exe
IFEO\xDedicLogCleaner.exe: [Debugger] fixmapi.exe
IFEO\XmppAuth.exe: [Debugger] fixmapi.exe
IFEO\xmr-stak-cpu.exe: [Debugger] fixmapi.exe
IFEO\xmr-stak.exe: [Debugger] fixmapi.exe
IFEO\xmrig-notls.exe: [Debugger] fixmapi.exe
IFEO\xmrig.exe: [Debugger] fixmapi.exe
IFEO\xmrigDaemon.exe: [Debugger] fixmapi.exe
IFEO\xmrigMiner.exe: [Debugger] fixmapi.exe
IFEO\xngiesa.exe: [Debugger] fixmapi.exe
IFEO\xp64.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\xray.exe: [Debugger] fixmapi.exe
IFEO\xscan_gui.exe: [Debugger] cmd /c start /MIN wscript //nologo C:\Windows\framework.vbs
IFEO\xStarter.exe: [Debugger] fixmapi.exe
IFEO\xstartui.exe: [Debugger] fixmapi.exe
IFEO\XTray.exe: [Debugger] fixmapi.exe
IFEO\ybrwicon.exe: [Debugger] fixmapi.exe
IFEO\ytbrowser.exe: [Debugger] fixmapi.exe
IFEO\ytpumpchrome.exe: [Debugger] fixmapi.exe
IFEO\yyqlogin.exe: [Debugger] fixmapi.exe
IFEO\z.tmp: [Debugger] fixmapi.exe
IFEO\zam.exe: [Debugger] fixmapi.exe
IFEO\Zanda.exe: [Debugger] fixmapi.exe
IFEO\ZavAux.exe: [Debugger] fixmapi.exe
IFEO\ZavCore.exe: [Debugger] fixmapi.exe
IFEO\ZERO-V WORMTRAP.EXE: [Debugger] fixmapi.exe
IFEO\ZEROVSCN.EXE: [Debugger] fixmapi.exe
IFEO\ZhuDongFangYu.exe: [Debugger] fixmapi.exe
IFEO\zillya.exe: [Debugger] fixmapi.exe
IFEO\zkosc.exe: [Debugger] fixmapi.exe
IFEO\zkzk.exe: [Debugger] fixmapi.exe
IFEO\zlclient.exe: [Debugger] fixmapi.exe
IFEO\Zlh.exe: [Debugger] fixmapi.exe
IFEO\Zpgiupy.exe: [Debugger] fixmapi.exe
IFEO\zskl.exe: [Debugger] fixmapi.exe
IFEO\ZVMonNt.exe: [Debugger] fixmapi.exe
IFEO\ZVMOUNT.EXE: [Debugger] fixmapi.exe

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

"!SASCORE" => service was unlocked. <==== ATTENTION
"360AvFlt" => service was unlocked. <==== ATTENTION
"360Box64" => service was unlocked. <==== ATTENTION
"360FsFlt" => service was unlocked. <==== ATTENTION
"360netmon" => service was unlocked. <==== ATTENTION
"a2AntiMalware" => service was unlocked. <==== ATTENTION
"AcronisActiveProtectionService" => service was unlocked. <==== ATTENTION
"Adguard Service" => service was unlocked. <==== ATTENTION
"AdvancedSystemCareService12" => service was unlocked. <==== ATTENTION
"Amsp" => service was unlocked. <==== ATTENTION
"AntiRansom3" => service was unlocked. <==== ATTENTION
"AntiRansom4" => service was unlocked. <==== ATTENTION
"AntiVirMailService" => service was unlocked. <==== ATTENTION
"AntiVirSchedulerService" => service was unlocked. <==== ATTENTION
"AntiVirService" => service was unlocked. <==== ATTENTION
"AntiVirWebService" => service was unlocked. <==== ATTENTION
"arwsrvc" => service was unlocked. <==== ATTENTION
"aswBcc" => service was unlocked. <==== ATTENTION
"aswMonFlt" => service was unlocked. <==== ATTENTION
"Avast Business Console Client Antivirus Service" => service was unlocked. <==== ATTENTION
"avast! Antivirus" => service was unlocked. <==== ATTENTION
"AvastAvWrapper" => service was unlocked. <==== ATTENTION
"AVG Antivirus" => service was unlocked. <==== ATTENTION
"avgArDisk" => service was unlocked. <==== ATTENTION
"avgArPot" => service was unlocked. <==== ATTENTION
"avgbIDSAgent" => service was unlocked. <==== ATTENTION
"avgbidsdriver" => service was unlocked. <==== ATTENTION
"avgbidsh" => service was unlocked. <==== ATTENTION
"avgbuniv" => service was unlocked. <==== ATTENTION
"avgElam" => service was unlocked. <==== ATTENTION
"avgKbd" => service was unlocked. <==== ATTENTION
"avgMonFlt" => service was unlocked. <==== ATTENTION
"avgRdr" => service was unlocked. <==== ATTENTION
"avgRvrt" => service was unlocked. <==== ATTENTION
"avgSnx" => service was unlocked. <==== ATTENTION
"avgSP" => service was unlocked. <==== ATTENTION
"avgStm" => service was unlocked. <==== ATTENTION
"avgsvc" => service was unlocked. <==== ATTENTION
"avgVmm" => service was unlocked. <==== ATTENTION
"Avira.ServiceHost" => service was unlocked. <==== ATTENTION
"Avp" => service was unlocked. <==== ATTENTION
"AVP19.0.0" => service was unlocked. <==== ATTENTION
"AVP20.0" => service was unlocked. <==== ATTENTION
"avpsus" => service was unlocked. <==== ATTENTION
"Behavior Detection System" => service was unlocked. <==== ATTENTION
"BitDefenderCOM" => service was unlocked. <==== ATTENTION
"BkavAR" => service was unlocked. <==== ATTENTION
"BkavAutoFlt" => service was unlocked. <==== ATTENTION
"BkavBC" => service was unlocked. <==== ATTENTION
"BkavChkUI" => service was unlocked. <==== ATTENTION
"BkavCoreLib" => service was unlocked. <==== ATTENTION
"BkavFCDrv" => service was unlocked. <==== ATTENTION
"BkavSD" => service was unlocked. <==== ATTENTION
"BkavSDF" => service was unlocked. <==== ATTENTION
"BkavSdFlt" => service was unlocked. <==== ATTENTION
"BkavService" => service was unlocked. <==== ATTENTION
"BkavSP" => service was unlocked. <==== ATTENTION
"BkavSR" => service was unlocked. <==== ATTENTION
"BkavSW" => service was unlocked. <==== ATTENTION
"BkavSystemService" => service was unlocked. <==== ATTENTION
"ByteFenceService" => service was unlocked. <==== ATTENTION
"Chemtable Startup Checking" => service was unlocked. <==== ATTENTION
"ClientManager" => service was unlocked. <==== ATTENTION
"CmdAgent" => service was unlocked. <==== ATTENTION
"cmderd" => service was unlocked. <==== ATTENTION
"cmdGuard" => service was unlocked. <==== ATTENTION
"cmdHlp" => service was unlocked. <==== ATTENTION
"cmdvirth" => service was unlocked. <==== ATTENTION
"Core Scanning Server" => service was unlocked. <==== ATTENTION
"Core Scanning ServerEx" => service was unlocked. <==== ATTENTION
"dcCtrlDrv" => service was unlocked. <==== ATTENTION
"dcDrv" => service was unlocked. <==== ATTENTION
"DrWebAVService" => service was unlocked. <==== ATTENTION
"DrWebEngine" => service was unlocked. <==== ATTENTION
"DrWebES" => service was unlocked. <==== ATTENTION
"DrWebFwSvc" => service was unlocked. <==== ATTENTION
"DrWebLwf" => service was unlocked. <==== ATTENTION
"DrWebNetFilter" => service was unlocked. <==== ATTENTION
"DrWebWfp" => service was unlocked. <==== ATTENTION
"DUMeterSvc" => service was unlocked. <==== ATTENTION
"DwProt" => service was unlocked. <==== ATTENTION
"eamonm" => service was unlocked. <==== ATTENTION
"eeCtrl" => service was unlocked. <==== ATTENTION
"ehdrv" => service was unlocked. <==== ATTENTION
"ekrn" => service was unlocked. <==== ATTENTION
"epag" => service was unlocked. <==== ATTENTION
"EPIntegrationService" => service was unlocked. <==== ATTENTION
"EPProtectedService" => service was unlocked. <==== ATTENTION
"EPRedline" => service was unlocked. <==== ATTENTION
"EPSecurityService" => service was unlocked. <==== ATTENTION
"EPUpdateService" => service was unlocked. <==== ATTENTION
"EraAgentSvc" => service was unlocked. <==== ATTENTION
"EraserSvc11731" => service was unlocked. <==== ATTENTION
"EsgShKernel" => service was unlocked. <==== ATTENTION
"ESProtectionDriver" => service was unlocked. <==== ATTENTION
"F-Secure Gatekeeper" => service was unlocked. <==== ATTENTION
"F-Secure UL HIPS" => service was unlocked. <==== ATTENTION
"F-Secure WebUI Daemon" => service was unlocked. <==== ATTENTION
"FA_Scheduler" => service was unlocked. <==== ATTENTION
"fortiapd" => service was unlocked. <==== ATTENTION
"FortiAptFilter" => service was unlocked. <==== ATTENTION
"FortiFilter" => service was unlocked. <==== ATTENTION
"FortiFW" => service was unlocked. <==== ATTENTION
"fortiloader" => service was unlocked. <==== ATTENTION
"fortimon3" => service was unlocked. <==== ATTENTION
"Fortinet_FSAE" => service was unlocked. <==== ATTENTION
"Fortips" => service was unlocked. <==== ATTENTION
"FortiShield" => service was unlocked. <==== ATTENTION
"fortisniff" => service was unlocked. <==== ATTENTION
"FortiWF" => service was unlocked. <==== ATTENTION
"fsdevcon" => service was unlocked. <==== ATTENTION
"fselms" => service was unlocked. <==== ATTENTION
"fshoster" => service was unlocked. <==== ATTENTION
"fsnethoster" => service was unlocked. <==== ATTENTION
"FSORSPClient" => service was unlocked. <==== ATTENTION
"fsulhoster" => service was unlocked. <==== ATTENTION
"fsulorsp" => service was unlocked. <==== ATTENTION
"fsulprothoster" => service was unlocked. <==== ATTENTION
"ftsvnic" => service was unlocked. <==== ATTENTION
"ft_vnic" => service was unlocked. <==== ATTENTION
"GlassWire" => service was unlocked. <==== ATTENTION
"gwdrv" => service was unlocked. <==== ATTENTION
"ImmunetNetworkMonitorDriver" => service was unlocked. <==== ATTENTION
"ImmunetProtectDriver" => service was unlocked. <==== ATTENTION
"ImmunetProtect_6.2.4" => service was unlocked. <==== ATTENTION
"ImmunetSelfProtectDriver" => service was unlocked. <==== ATTENTION
"inspect" => service was unlocked. <==== ATTENTION
"IsmServ" => service was unlocked. <==== ATTENTION
"kavfs" => service was unlocked. <==== ATTENTION
"kavfsgt" => service was unlocked. <==== ATTENTION
"kavfsscs" => service was unlocked. <==== ATTENTION
"kavfsslp" => service was unlocked. <==== ATTENTION
"klam" => service was unlocked. <==== ATTENTION
"KLFLTDEV" => service was unlocked. <==== ATTENTION
"KLIM6" => service was unlocked. <==== ATTENTION
"klnagent" => service was unlocked. <==== ATTENTION
"klpd" => service was unlocked. <==== ATTENTION
"ksnproxy" => service was unlocked. <==== ATTENTION
"KvMonXP.exe" => service was unlocked. <==== ATTENTION
"LavasoftAdAwareService11" => service was unlocked. <==== ATTENTION
"ManagedAntivirus" => service was unlocked. <==== ATTENTION
"MBAMChameleon" => service was unlocked. <==== ATTENTION
"MbamElam" => service was unlocked. <==== ATTENTION
"MBAMFarflt" => service was unlocked. <==== ATTENTION
"MBAMIService" => service was unlocked. <==== ATTENTION
"MBAMProtector" => service was unlocked. <==== ATTENTION
"MBAMService" => service was unlocked. <==== ATTENTION
"MBAMSwissArmy" => service was unlocked. <==== ATTENTION
"MBAMWebProtection" => service was unlocked. <==== ATTENTION
"McAfee SiteAdvisor Enterprise Service" => service was unlocked. <==== ATTENTION
"McAfee WebAdvisor" => service was unlocked. <==== ATTENTION
"McAfeeDLPAgentService" => service was unlocked. <==== ATTENTION
"McAfeeEngineService" => service was unlocked. <==== ATTENTION
"McAfeeFramework" => service was unlocked. <==== ATTENTION
"McComponentHostService" => service was unlocked. <==== ATTENTION
"McShield" => service was unlocked. <==== ATTENTION
"McTaskManager" => service was unlocked. <==== ATTENTION
"mfeapfk" => service was unlocked. <==== ATTENTION
"mfeavfk" => service was unlocked. <==== ATTENTION
"mfebopk" => service was unlocked. <==== ATTENTION
"mfehidk" => service was unlocked. <==== ATTENTION
"mfetdik" => service was unlocked. <==== ATTENTION
"mfevtp" => service was unlocked. <==== ATTENTION
"mpsdrv" => service was unlocked. <==== ATTENTION
"MpsSvc" => service was unlocked. <==== ATTENTION
"mssecsvc2.0" => service was unlocked. <==== ATTENTION
"MSSystem" => service was unlocked. <==== ATTENTION
"mweshield" => service was unlocked. <==== ATTENTION
"NanoServiceMain" => service was unlocked. <==== ATTENTION
"nortonsecurity" => service was unlocked. <==== ATTENTION
"ntrtscan" => service was unlocked. <==== ATTENTION
"ofcservice" => service was unlocked. <==== ATTENTION
"Online Protection System" => service was unlocked. <==== ATTENTION
"Platinum Host Service" => service was unlocked. <==== ATTENTION
"PSUAService" => service was unlocked. <==== ATTENTION
"QHActiveDefense" => service was unlocked. <==== ATTENTION
"Quick Update Service" => service was unlocked. <==== ATTENTION
"RepairService" => service was unlocked. <==== ATTENTION
"RManService" => service was unlocked. <==== ATTENTION
"rtop" => service was unlocked. <==== ATTENTION
"SAVAdminService" => service was unlocked. <==== ATTENTION
"SAVService" => service was unlocked. <==== ATTENTION
"ScanWscS" => service was unlocked. <==== ATTENTION
"SCS" => service was unlocked. <==== ATTENTION
"ScSecSvc" => service was unlocked. <==== ATTENTION
"SecureLine" => service was unlocked. <==== ATTENTION
"SecurityHealthService" => service was unlocked. <==== ATTENTION
"SecurityService" => service was unlocked. <==== ATTENTION
"Sense" => service was unlocked. <==== ATTENTION
"SepMasterService" => service was unlocked. <==== ATTENTION
"SmcService" => service was unlocked. <==== ATTENTION
"SNAC" => service was unlocked. <==== ATTENTION
"SntpService" => service was unlocked. <==== ATTENTION
"Sophos AutoUpdate Service" => service was unlocked. <==== ATTENTION
"Sophos Clean Service" => service was unlocked. <==== ATTENTION
"Sophos Device Control Service" => service was unlocked. <==== ATTENTION
"Sophos ELAM" => service was unlocked. <==== ATTENTION
"Sophos Endpoint Defense" => service was unlocked. <==== ATTENTION
"Sophos Endpoint Defense Service" => service was unlocked. <==== ATTENTION
"Sophos File Scanner Service" => service was unlocked. <==== ATTENTION
"Sophos Health Service" => service was unlocked. <==== ATTENTION
"Sophos MCS Agent" => service was unlocked. <==== ATTENTION
"Sophos MCS Client" => service was unlocked. <==== ATTENTION
"Sophos Safestore Service" => service was unlocked. <==== ATTENTION
"Sophos System Protection Service" => service was unlocked. <==== ATTENTION
"Sophos Web Control Service" => service was unlocked. <==== ATTENTION
"SophosBootDriver" => service was unlocked. <==== ATTENTION
"SophosFIM" => service was unlocked. <==== ATTENTION
"sophossps" => service was unlocked. <==== ATTENTION
"SpiderG3" => service was unlocked. <==== ATTENTION
"SRTSP" => service was unlocked. <==== ATTENTION
"SRTSPX" => service was unlocked. <==== ATTENTION
"SsPaAdm" => service was unlocked. <==== ATTENTION
"ssPaSetMgr" => service was unlocked. <==== ATTENTION
"ssSpnAv" => service was unlocked. <==== ATTENTION
"svchost" => service was unlocked. <==== ATTENTION
"swi_filter" => service was unlocked. <==== ATTENTION
"swi_service" => service was unlocked. <==== ATTENTION
"SymEFASI" => service was unlocked. <==== ATTENTION
"SymELAM" => service was unlocked. <==== ATTENTION
"SymEvent" => service was unlocked. <==== ATTENTION
"SymEvnt" => service was unlocked. <==== ATTENTION
"SymIRON" => service was unlocked. <==== ATTENTION
"SYMNETS" => service was unlocked. <==== ATTENTION
"Teefer2" => service was unlocked. <==== ATTENTION
"TMBMServer" => service was unlocked. <==== ATTENTION
"TmCCSF" => service was unlocked. <==== ATTENTION
"TmFilter" => service was unlocked. <==== ATTENTION
"TMiCRCScanService" => service was unlocked. <==== ATTENTION
"tmlisten" => service was unlocked. <==== ATTENTION
"TmPreFilter" => service was unlocked. <==== ATTENTION
"TmProxy" => service was unlocked. <==== ATTENTION
"tmtdi" => service was unlocked. <==== ATTENTION
"tmusa" => service was unlocked. <==== ATTENTION
"TrkSvr" => service was unlocked. <==== ATTENTION
"TrkWks" => service was unlocked. <==== ATTENTION
"updatesrv" => service was unlocked. <==== ATTENTION
"VSApiNt" => service was unlocked. <==== ATTENTION
"vsserv" => service was unlocked. <==== ATTENTION
"vsservppl" => service was unlocked. <==== ATTENTION
"WAHost" => service was unlocked. <==== ATTENTION
"wcvvses" => service was unlocked. <==== ATTENTION
"WdBoot" => service was unlocked. <==== ATTENTION
"WdFilter" => service was unlocked. <==== ATTENTION
"WdNisDrv" => service was unlocked. <==== ATTENTION
"WdNisSvc" => service was unlocked. <==== ATTENTION
"werlsfks" => service was unlocked. <==== ATTENTION
"WinDefend" => service was unlocked. <==== ATTENTION
"Windows Locator Service (managed by AlwaysUpService)" => service was unlocked. <==== ATTENTION
"WindowsDefend" => service was unlocked. <==== ATTENTION
"WRSVC" => service was unlocked. <==== ATTENTION
"wscsvs" => service was unlocked. <==== ATTENTION
"ZAMSvc" => service was unlocked. <==== ATTENTION
"_wfcs" => service was unlocked. <==== ATTENTION

S2 Java; C:\ProgramData\Microsoft\WwanSvc\csrss.exe [X] <==== ATTENTION

2020-03-05 09:55 - 2020-03-05 22:57 - 000013911 _____ C:\Windows\system32\Info.hta
2020-03-05 09:55 - 2020-03-05 22:57 - 000013911 _____ C:\Users\Администратор\AppData\Roaming\Info.hta
2020-03-05 09:55 - 2020-03-05 22:57 - 000000208 _____ C:\Users\Все пользователи\Desktop\FILES ENCRYPTED.txt
2020-03-05 09:55 - 2020-03-05 22:57 - 000000208 _____ C:\Users\Администратор\Desktop\FILES ENCRYPTED.txt
2020-03-05 09:55 - 2020-03-05 22:57 - 000000208 _____ C:\Users\Public\Desktop\FILES ENCRYPTED.txt
2020-03-05 09:55 - 2020-03-05 22:57 - 000000208 _____ C:\ProgramData\Desktop\FILES ENCRYPTED.txt
2020-03-05 09:55 - 2020-03-05 22:57 - 000000208 _____ C:\FILES ENCRYPTED.txt
End::






2. Скопируйте выделенный текст (правая кнопка мышиКопировать).
3. Запустите Farbar Recovery Scan Tool.
4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.
  • Обратите внимание: перезагрузку компьютера нужно выполнить вручную после данного скрипта.

Ссылка на сообщение
Поделиться на другие сайты

Скриншот во вложении


Скриншот во вложении


Результат выполнения скрипта во вложении

Компьютер перезагрузился сам

post-57726-0-83166000-1584037125_thumb.png

Fixlog.txt

Ссылка на сообщение
Поделиться на другие сайты

1. Выделите следующий код:

 

Start::
CreateRestorePoint:
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta [2020-03-05] () [File not signed]
Startup: C:\Users\Администратор\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Info.hta [2020-03-05] () [File not signed]
S2 WmiSrv; "%WINDIR%\fonts\s\svchost.exe"  "WmiSrv" "%WINDIR%\fonts\s\www\webisida.browser.exe" -k -m -rn -f 3 0 -fd 5 1 -lh [X]
S4 Networks; C:\WINDOWS\debug\Nat\svchast.exe [X]
S2 rp servise (managed by AlwaysUpService); "C:\Windows\Fonts\s\AlwaysUpService.exe"  "rp servise (managed by AlwaysUpService)" "C:\Windows\Fonts\s\www\webisida.browser.exe" -k -m -rn -f 3 0 -fd 5 1
C:\Windows\fonts\s\wmisrv.exe
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
End::
2. Скопируйте выделенный текст (правая кнопка мышиКопировать).

3. Запустите Farbar Recovery Scan Tool.

4. Нажмите один раз на кнопку Fix и подождите. Программа создаст лог-файл (Fixlog.txt). Пожалуйста, прикрепите его в следующем сообщении.

  • Обратите внимание: перезагрузку компьютера нужно выполнить вручную после данного скрипта.
Ссылка на сообщение
Поделиться на другие сайты

Файл Fixlog.txt не скачан, как вы определили? Или в нашем случае уже с самого начала было понятно, что расшифровку таких файлов еще не разработали?

Ссылка на сообщение
Поделиться на другие сайты

Понятно что зашифровано наглухо, но все же есть какая-то надежна?

Может обратиться в компанию антивируса касперского с коммерческим запросом о помощи?

Или есть все таки шанс испробовать возможную альтернативу?

Что посоветуете в нашей ситуации? Есть бекапы, но они зашифрованы.

Ссылка на сообщение
Поделиться на другие сайты

 

 


Может обратиться в компанию антивируса касперского с коммерческим запросом о помощи?
Обращайтесь. Но шансы призрачные.
Ссылка на сообщение
Поделиться на другие сайты

Присоединяйтесь к обсуждению

Вы можете написать сейчас и зарегистрироваться позже. Если у вас есть аккаунт, авторизуйтесь, чтобы опубликовать от имени своего аккаунта.

Гость
Ответить в этой теме...

×   Вставлено с форматированием.   Вставить как обычный текст

  Разрешено использовать не более 75 эмодзи.

×   Ваша ссылка была автоматически встроена.   Отображать как обычную ссылку

×   Ваш предыдущий контент был восстановлен.   Очистить редактор

×   Вы не можете вставлять изображения напрямую. Загружайте или вставляйте изображения по ссылке.

  • Похожий контент

    • pdgerman
      От pdgerman
      Добрый день! после перезагрузки сервака на одной из учеток зашифровались все личные файлы в названии каждого .id-AC586E9C.[anticrypto@tutanota.com].harma
      прошу помощи. пример мелкого файла прикрепляю
      appointment.fr3.id-AC586E9C.[anticrypto@tutanota.com].zip
    • k.kuleshevich@gmail.com
      От k.kuleshevich@gmail.com
      Доброй ночи.
       
      Сегодня зашел через rdp на сервер (доступ имею только я). Увидел странные вещи: была открыта командная строка, где были результаты сканирования локальной сети и монтирования диска. Был недоступен диспетчер задач (неактивное меню). Сразу выключил сервер. Вытащил диск, вставил его в другой компьютер без доступа по сети. Большая часть диска оказалась зашифрована (кроме двух с половиной последних папок, далеко не самых ценных). 
      На диске нашел два варианта файлов dharma (отличаю их по размеру самих файлов). Оба приложил, расширение переименовал в e_x_e.
       
      В корне диска нашел два файла: info.hta и private.harma. Возможно, чем-то помогут в анализе (приложил в архиве "Дополнительно").
      Остался примонтированным отдельный диск с именем System Reserved, на котором лежало три файла из архива "Дополнительно"
      Addition.txt FRST.txt Дополнительно.rar Зашифрованные файлы.rar Шифровальщик.rar
    • Starikhottabych
      От Starikhottabych
      Добрый день!
      Словил вирус который зашифровал все файлы с окончанием restore_data@gmx.de. harma/
      Прошу помочь в расшифровке. 
    • Nick2312
      От Nick2312
      Добрый день,
      словили вирус шифровальщик. В результате общения со злоумышленниками удалось получить ключик,
      но нет самой программы дешифратора.  Если есть возможность, поделитесь программой. 
       
      ЗЫЖ
      Да, такое бывает. Кто-то заплатил и получил ответ. Кто-то получил программу иными путями. 
    • microran
      От microran
      Сообщение от модератора thyrex Перемещено в Помощь по расшифровке  
      Здравствуйте все файлы были зашифрованы вирусом [helpmedecoding@airmail.cc].harma
       
      Логи:
      CollectionLog-2021.02.12-11.10.zip
×
×
  • Создать...