- HEUR:Trojan-Downloader.Win32.Generic -> c:program files (x86)48 dresses48_dresses_updating_service.exe ( BitDefender: Gen:Trojan.Heur.RP.fmGfaWXZ!Rni )
- HEUR:Trojan.WinLNK.StartPage.gena -> c:programdatamicrosoftwindowsstart menuprogramsgoogle chromegoogle chrome.lnk
- HEUR:Trojan.WinLNK.StartPage.gena -> c:usersвладимирappdataroamingmicrosoftwindowsstart menuprogramsinternet explorer.lnk
- HEUR:Trojan.WinLNK.StartPage.gena -> c:usersвладимирappdataroamingmicrosoftinternet explorerquick launchgoogle chrome.lnk
- HEUR:Trojan.WinLNK.StartPage.gena -> c:usersвладимирappdataroamingmicrosoftinternet explorerquick launchlaunch internet explorer browser.lnk
- not-a-virus:AdWare.Win32.SearchProtect.qt -> c:program files (x86)xtabsuptab.dll ( DrWEB: Adware.Mutabaha.267 )
- not-a-virus:AdWare.Win32.Vitruvian.e -> c:program files (x86)quickref_1.10.0.9uninstall.exe ( DrWEB: Adware.Plugin.274, AVAST4: Win32:Adware-gen [Adw] )
- not-a-virus:WebToolbar.Win32.CroRi.eya -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-6.exe ( DrWEB: Trojan.Crossrider1.23040, BitDefender: Gen:Application.Heur.oz1@kW63VGki )
- not-a-virus:WebToolbar.Win32.CroRi.feg -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-10.exe ( DrWEB: Trojan.Crossrider1.23040 )
- not-a-virus:WebToolbar.Win32.CroRi.feg -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-1-7.exe ( DrWEB: Trojan.Crossrider1.23040, BitDefender: Gen:Application.Heur.cv1@ka4XCgdO )
- not-a-virus:WebToolbar.Win32.CroRi.feg -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-5.exe ( DrWEB: Trojan.Crossrider1.23040, BitDefender: Gen:Application.Heur.!u1@k8fPVKmO )
- not-a-virus:WebToolbar.Win32.CroRi.feg -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-7.exe ( DrWEB: Trojan.Crossrider1.23040, BitDefender: Gen:Application.Heur.cv1@ka4XCgdO )
- not-a-virus:WebToolbar.Win32.CrossRider.mgk -> c:program files (x86)smartsaver+ 15916a028c-c71c-498c-8bc0-ff59580dd93d-11.exe ( DrWEB: Trojan.Crossrider1.23040, BitDefender: Gen:Application.Heur.4v1@kyijWFfO )
- not-a-virus:WebToolbar.Win32.CrossRider.zzu -> c:program files (x86)48 dresses48_dresses_notification_service.exe ( DrWEB: Trojan.Crossrider1.24381 )
- Trojan-Ransom.Win32.Blocker.gvbr -> c:windowssystem32audiohd.exe ( DrWEB: Trojan.MulDrop5.51053, BitDefender: Gen:Variant.Zusy.79049, AVAST4: Win32:Malware-gen )
- Trojan.Win32.ExtenBro.os -> c:usersnickappdatalocalmicrosoftextensionsextsetup .exe