- not-a-virus:Downloader.NSIS.Agent.afp -> c:programdatamicrosoftadobeflash player*78b4a57-fb31-4399-ade1-f9d5fc4acca76ccfca79-c947-4407-9522-236c74d14eac.exe
- not-a-virus:RemoteAdmin.Win32.Ammyy.xcs -> c:userstohecdesktopaa_v3.5.exe ( DrWEB: Program.RemoteAdmin.758 )
- not-a-virus:RemoteAdmin.Win32.ROM.at -> c:windowssystem32romwln.dll
- not-a-virus:RiskTool.NSIS.ExtInstall.b -> c:usersсергейappdatalocalmicrosoftextensionsextset up.exe
- not-a-virus:RiskTool.Python.Miner.b -> c:windowsmssct.exe ( DrWEB: Tool.BtcMine.292 )
- Trojan.NSIS.GoogUpdate.dq -> c:users1appdataroamingsfpech.exe ( DrWEB: Trojan.Crossrider1.26059, BitDefender: Gen:Application.Heur.Ev1@meMAlwmO )
- Trojan.NSIS.GoogUpdate.dq -> c:users1appdataroamingpyava.exe ( DrWEB: Trojan.Crossrider1.26059, BitDefender: Gen:Application.Heur.8v1@mKEvbebO )
- Trojan.NSIS.GoogUpdate.dt -> c:users1appdataroamingastwjag.exe ( DrWEB: Trojan.Crossrider1.25393, BitDefender: Gen:Application.Heur.2v1@mStSJXfO, AVAST4: Win32:Crossrider-BT [Adw] )
- Trojan.NSIS.GoogUpdate.dt -> c:users1appdataroamingcxr.exe ( DrWEB: Trojan.Crossrider1.25393, BitDefender: Adware.Plush.I, AVAST4: Win32:Crossrider-BT [Adw] )