KILLALL::
Rootkit::
Microsoft Video Capture Controls
Microsoft Synchronization Manager
Synchronization Data Schedul
Driver::
Wupdated
naecd
File::
C:\WINNT\system32\glfyylpt.ini
C:\WINNT\BMf3dff8e5.xml
C:\WINNT\system\xsrqxvnb.exe
C:\WINNT\system32\oaocara.exe
Folder::
C:\WINNT\system32\G1r\
C:\Program Files\AntiSpy\
C:\PROGRA~1\COMMON~1\fkwz\
Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Video Capture Controls"=-
"Microsoft Synchronization Manager"=-
"Synchronization Data Schedul"=-
"Task manager"=-
"Mw4sRiGnQ"=-
"System Updates"=-
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"System Updates"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Video Capture Controls"=-
"Microsoft Synchronization Manager"=-
"Synchronization Data Schedul"=-
"8q8rg0oc"=-
"antiware"=-
"77ni3si"=-
"njzqzdls"=-
"AntiSpy"=-
"System Updates"=-
"Win2KService"=-
"f0eccb79"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices]
"Microsoft Video Capture Controls"=-
"Microsoft Synchronization Manager"=-
"Synchronization Data Schedul"=-
"Task manager"=-
"System Updates"=-
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"Microsoft Video Capture Controls"=-
"Microsoft Synchronization Manager"=-
"Synchronization Data Schedul"=-
"Microsoft Update Machine"=-
"fkwz"=-
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer\run]
"xsrqxvnb.exe"=-
[-HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\8d538988-50a3-4b76-b9b2-8d0bbc469acc]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Video Capture Controls]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Microsoft Synchronization Manager]
[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunServices\Synchronization Data Schedul]