Код:
PUP.Optional.Findr.A, HKU\S-1-5-21-1547428205-1414300043-1642561714-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\MICROSOFT\INTERNET EXPLORER\SEARCHSCOPES\{16CC3586-3547-4025-9E2F-F04C365D8B90}, , [f62c4b5080fb0234588f8cbfc43e1fe1],
Trojan.Agent.XN, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\Kak 1.22, , [0f136b3083f83501bd9c7d9115efcc34],
PUP.Optional.FunMoods.A, HKLM\SOFTWARE\WOW6432NODE\INSTALLCORE\funmoods, , [5bc7702b0279d0669b9efbd462a1758b],
PUP.FunMoods, HKU\S-1-5-21-1547428205-1414300043-1642561714-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\Funmoods, , [909254476615033332eee1ff5ea4ac54],
PUP.FunMoods, HKU\S-1-5-21-1547428205-1414300043-1642561714-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE\funmoods, , [d94952491c5f1d194ed31fc10ef4b24e],
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1547428205-1414300043-1642561714-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE, , [849e217a1c5fe353bc74d41a20e346ba],
Registry Values: 1
PUP.Optional.InstallCore.A, HKU\S-1-5-21-1547428205-1414300043-1642561714-1000-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\SOFTWARE\INSTALLCORE|tb, 1P1O1N1R1G1M1J, , [849e217a1c5fe353bc74d41a20e346ba]
Folders: 2
PUP.Optional.FunMoods.A, C:\Users\User\AppData\Roaming\Funmoods\UpdateProc, , [0d15f6a5e2992412ddfd9d3cbd45f60a],
Trojan.Agent.XN, C:\Program Files (x86)\Inst\Kak, , [0f136b3083f83501bd9c7d9115efcc34],
Files: 23
PUP.Optional.SweetPacks.A, C:\Program Files (x86)\?????°???»?°????\???µ?· ???»?°N?N???????\bar.exe, , [19090497a4d754e2e4ee9b71c23f6d93],
Trojan.Bicololo, C:\$Recycle.Bin\S-1-5-21-1547428205-1414300043-1642561714-1000\$RQD0SWS.rar, , [47db613a72097bbbfe6a741250b46d93],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[1], , [79a96635522962d4f0e27e8efb06ee12],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[2], , [33ef4c4f542760d6a23029e3cd3420e0],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[3], , [1f030398d4a7d264e9e9a6663cc533cd],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[4], , [9290e3b88eed89ad31a17597b849d42c],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[5], , [9c864b50611a75c19a38f3197d841ee2],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[6], , [f52d3467a2d9181e8a4838d4a35ea25e],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[7], , [a2809506601b70c6e4ee3ad2cb36748c],
PUP.Optional.SweetPacks.A, C:\Windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\update[8], , [39e9bcdfaecdf1450cc67d8f966bf30d],
PUP.Optional.FunMoods.A, C:\Users\User\AppData\Roaming\Funmoods\UpdateProc\config.dat, , [0d15f6a5e2992412ddfd9d3cbd45f60a],
PUP.Optional.FunMoods.A, C:\Users\User\AppData\Roaming\Funmoods\UpdateProc\info.dat, , [0d15f6a5e2992412ddfd9d3cbd45f60a],
PUP.Optional.FunMoods.A, C:\Users\User\AppData\Roaming\Funmoods\UpdateProc\STTL.DAT, , [0d15f6a5e2992412ddfd9d3cbd45f60a],
PUP.Optional.FunMoods.A, C:\Users\User\AppData\Roaming\Funmoods\UpdateProc\TTL.DAT, , [0d15f6a5e2992412ddfd9d3cbd45f60a],
Trojan.Agent.XN, C:\Program Files (x86)\Inst\Kak\Uninstall.ini, , [0f136b3083f83501bd9c7d9115efcc34],
Trojan.Agent.XN, C:\Program Files (x86)\Inst\Kak\buhlo.vbs, , [0f136b3083f83501bd9c7d9115efcc34],
Trojan.Agent.XN, C:\Program Files (x86)\Inst\Kak\cheburek.bat, , [0f136b3083f83501bd9c7d9115efcc34],
Trojan.Agent.XN, C:\Program Files (x86)\Inst\Kak\Uninstall.exe, , [0f136b3083f83501bd9c7d9115efcc34],