- HackTool.Win32.ShadowBrokers.n -> c:\programdata\rundll\libeay32.dll ( AVAST4: Win32:Rootkit-gen [Rtk] )
- Trojan.BAT.Zapchast.dx -> c:\programdata\install\del.bat
- Trojan.VBS.Starter.mi -> c:\programdata\rundll\start.exe
- Trojan.VBS.Starter.mj -> c:\programdata\windows\install.vbs
- Trojan.VBS.Starter.mj -> c:\programdata\windows\install.vbs