- Backdoor.Win32.Shiz.dwuw -> c:\windows\apppatch\nscrijk.exe
- Packed.Win32.Shiz.gen -> \956jai8.exe ( DrWEB: Trojan.Packed.20771, BitDefender: Gen:Variant.Zbot.20, NOD32: Win32/Spy.Shiz.NAL trojan, AVAST4: Win32:MalOb-IF [Cryp] )
- Trojan-Dropper.Win32.Dorifel.brx -> c:\femapv102\tmg\exe\tmgint.exe
- Trojan.Win32.Cidox.gai -> c:\windows\system32\qtsyizd.dll ( DrWEB: Trojan.Mayachok.1 )