Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adguard' = '%ProgramFiles(x86)%\Adguard\Adguard.exe /nosplash'
- [<HKLM>\System\CurrentControlSet\Services\Adguard Service] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Adguard Service] 'ImagePath' = '%ProgramFiles(x86)%\Adguard\AdguardSvc.exe'
- [<HKLM>\System\CurrentControlSet\Services\adgnetworktdidrv] 'Start' = '00000001'
- [<HKLM>\System\CurrentControlSet\Services\adgnetworktdidrv] 'ImagePath' = 'system32\drivers\adgnetworktdidrv.sys'
- 'Adguard Service' %ProgramFiles(x86)%\Adguard\AdguardSvc.exe
- 'adgnetworktdidrv' system32\drivers\adgnetworktdidrv.sys
- '%WINDIR%\syswow64\net.exe' stop "Adguard Service"
- %TEMP%\aut400c.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\adguard\adguard.lnk
- %ALLUSERSPROFILE%\adguard\is-8grr5.tmp
- %ProgramFiles(x86)%\adguard\langs\is-atqsh.tmp
- %ProgramFiles(x86)%\adguard\langs\is-v2tal.tmp
- %ProgramFiles(x86)%\adguard\langs\is-cmfub.tmp
- %ProgramFiles(x86)%\adguard\langs\is-kikdb.tmp
- %ProgramFiles(x86)%\adguard\langs\is-8hasp.tmp
- %ProgramFiles(x86)%\adguard\langs\is-v094t.tmp
- %ProgramFiles(x86)%\adguard\langs\is-pqp50.tmp
- %ProgramFiles(x86)%\adguard\langs\is-esaqf.tmp
- %ProgramFiles(x86)%\adguard\langs\is-uu1id.tmp
- %ProgramFiles(x86)%\adguard\langs\is-c6p08.tmp
- %ProgramFiles(x86)%\adguard\langs\is-6668l.tmp
- %ProgramFiles(x86)%\adguard\langs\is-ubn3p.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\adguard\uninstall.lnk
- %ProgramFiles(x86)%\adguard\langs\is-hretl.tmp
- %ProgramFiles(x86)%\adguard\langs\is-4nfjj.tmp
- %ProgramFiles(x86)%\adguard\langs\is-312uj.tmp
- %ProgramFiles(x86)%\adguard\langs\is-mk02r.tmp
- %ProgramFiles(x86)%\adguard\langs\is-pbtr4.tmp
- %ProgramFiles(x86)%\adguard\langs\is-g8nk1.tmp
- %ProgramFiles(x86)%\adguard\langs\is-84jk2.tmp
- %ProgramFiles(x86)%\adguard\langs\is-461a4.tmp
- %ProgramFiles(x86)%\adguard\langs\is-f27t6.tmp
- %ProgramFiles(x86)%\adguard\langs\is-mqss8.tmp
- %ProgramFiles(x86)%\adguard\langs\is-h8k1g.tmp
- %ProgramFiles(x86)%\adguard\langs\is-etvvq.tmp
- %ProgramFiles(x86)%\adguard\langs\is-29k5a.tmp
- %ProgramFiles(x86)%\adguard\langs\is-82c2f.tmp
- %ProgramFiles(x86)%\adguard\langs\is-kouo5.tmp
- %ProgramFiles(x86)%\adguard\langs\is-c2eft.tmp
- C:\users\public\desktop\adguard.lnk
- %ProgramFiles(x86)%\adguard\unins000.dat
- %ALLUSERSPROFILE%\adguard\logs\service\service_14-10-2020-23_38_13.558-2020-10-14.log
- %ProgramFiles(x86)%\adguard\drivers\win10\x64\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\win10\x86\adgnetworktdidrv.sys
- %ProgramFiles(x86)%\adguard\drivers\win10\x86\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x64\adgnetworktdidrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x64\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x64\adguardnetlib.dll
- %ProgramFiles(x86)%\adguard\drivers\x86\adgnetworktdidrv.sys
- %ALLUSERSPROFILE%\adguard\ssl\cert.db
- %ProgramFiles(x86)%\adguard\drivers\x86\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x86\adguardnetlib.dll
- %ProgramFiles(x86)%\adguard\drivers\x86\adguardnetreg.exe
- <DRIVERS>\adgnetworktdidrv.sys
- %WINDIR%\temp\udd1831.tmp
- %ALLUSERSPROFILE%\adguard\ssl\cert.db-journal
- %ProgramFiles(x86)%\adguard\drivers\win10\x64\adgnetworktdidrv.sys
- %ALLUSERSPROFILE%\microsoft\windows\caches\{2843ada2-0f67-4f78-92e2-b7a4ab26a670}.2.ver0x0000000000000002.db
- %ALLUSERSPROFILE%\microsoft\network\admngr.dat
- %WINDIR%\ehome\usrsts..dll
- %WINDIR%\syswow64\d3dx9_11.dll.tmp
- %WINDIR%\syswow64\drivers\vwifikerneldrv.sys
- %ALLUSERSPROFILE%\fontcacheev1.dat
- %ALLUSERSPROFILE%\adguard\logs\console\console_14-10-2020-23_38_23.log
- %ALLUSERSPROFILE%\adguard\adguard.db
- %ALLUSERSPROFILE%\adguard\adguard.db-journal
- %ALLUSERSPROFILE%\adguard\core\gm.db
- %ALLUSERSPROFILE%\adguard\core\gm.db-journal
- %ALLUSERSPROFILE%\adguard\core\version
- %HOMEPATH%\desktop\download free full programs\important note.txt
- %HOMEPATH%\desktop\download free full programs\facebook grups.url
- %HOMEPATH%\desktop\download free full programs\download free full programs.url
- %HOMEPATH%\desktop\download free full programs\byemir candan - youtube.url
- %ProgramFiles(x86)%\adguard\langs\is-0pck5.tmp
- %ProgramFiles(x86)%\adguard\drivers\x64\adguardnetreg.exe
- %ProgramFiles(x86)%\adguard\langs\is-1vamp.tmp
- %ProgramFiles(x86)%\adguard\nss\is-sm2bq.tmp
- %ProgramFiles(x86)%\adguard\is-g563p.tmp
- %ProgramFiles(x86)%\adguard\is-9eonl.tmp
- %ProgramFiles(x86)%\adguard\is-1ibdg.tmp
- %ProgramFiles(x86)%\adguard\is-q6j3g.tmp
- %ProgramFiles(x86)%\adguard\is-q28a5.tmp
- %ProgramFiles(x86)%\adguard\is-3ig5h.tmp
- %ProgramFiles(x86)%\adguard\is-0j6k2.tmp
- %ProgramFiles(x86)%\adguard\is-ql79e.tmp
- %ProgramFiles(x86)%\adguard\is-eke0o.tmp
- %TEMP%\is-297d2.tmp\wizardform.bitmapimage1.bmp
- %TEMP%\is-297d2.tmp\metroblue.vsf
- %TEMP%\is-297d2.tmp\vclstylesinno.dll
- %TEMP%\is-297d2.tmp\istask.dll
- %TEMP%\is-297d2.tmp\_isetup\_shfoldr.dll
- %ProgramFiles(x86)%\adguard\is-606uk.tmp
- %TEMP%\is-297d2.tmp\_isetup\_setup64.tmp
- %TEMP%\is-rh6ra.tmp\1.tmp
- %TEMP%\nsg6039.tmp\nact.dll
- %TEMP%\1\1.exe
- %TEMP%\nsg6039.tmp\uac.dll
- %TEMP%\52ff.tmp\s.bat
- C:\gecici_proje_klasoru\s.exe
- %TEMP%\aut4ebf.tmp
- C:\gecici_proje_klasoru\e.exe
- %TEMP%\aut4e8f.tmp
- C:\gecici_proje_klasoru\1.exe
- %TEMP%\aut402d.tmp
- C:\gecici_proje_klasoru\k.png
- %TEMP%\aut401c.tmp
- C:\gecici_proje_klasoru\grey.gif
- %TEMP%\is-297d2.tmp\_isetup\_regdll.tmp
- %ProgramFiles(x86)%\adguard\is-p48s0.tmp
- %ProgramFiles(x86)%\adguard\is-v8f36.tmp
- %ProgramFiles(x86)%\adguard\is-j95cb.tmp
- %ProgramFiles(x86)%\adguard\langs\is-7jjmu.tmp
- %ProgramFiles(x86)%\adguard\langs\is-odi8s.tmp
- %ProgramFiles(x86)%\adguard\libs\is-0rm3p.tmp
- %ProgramFiles(x86)%\adguard\nss\is-h98gh.tmp
- %ProgramFiles(x86)%\adguard\nss\is-bu8fl.tmp
- %ProgramFiles(x86)%\adguard\nss\is-j447f.tmp
- %ProgramFiles(x86)%\adguard\nss\is-tc23o.tmp
- %ProgramFiles(x86)%\adguard\nss\is-u77t8.tmp
- %ProgramFiles(x86)%\adguard\nss\is-4hm6n.tmp
- %ProgramFiles(x86)%\adguard\nss\is-fnddn.tmp
- %ProgramFiles(x86)%\adguard\nss\is-r47a2.tmp
- %ProgramFiles(x86)%\adguard\nss\is-8mdlv.tmp
- %ProgramFiles(x86)%\adguard\nss\is-qie8r.tmp
- %ProgramFiles(x86)%\adguard\nss\is-62src.tmp
- %ProgramFiles(x86)%\adguard\is-p326j.tmp
- %ProgramFiles(x86)%\adguard\is-td176.tmp
- %ProgramFiles(x86)%\adguard\is-fflm5.tmp
- %ProgramFiles(x86)%\adguard\is-uk93p.tmp
- %ProgramFiles(x86)%\adguard\is-d2ak5.tmp
- %ProgramFiles(x86)%\adguard\is-f8dv9.tmp
- %ProgramFiles(x86)%\adguard\is-c6rni.tmp
- %ProgramFiles(x86)%\adguard\is-2bmhf.tmp
- %ProgramFiles(x86)%\adguard\is-an9bg.tmp
- %ProgramFiles(x86)%\adguard\is-oss9c.tmp
- %ProgramFiles(x86)%\adguard\is-ii2pc.tmp
- %ProgramFiles(x86)%\adguard\is-bl0f8.tmp
- %ProgramFiles(x86)%\adguard\is-te42s.tmp
- %ProgramFiles(x86)%\adguard\is-21bmk.tmp
- %ProgramFiles(x86)%\adguard\is-2tsbr.tmp
- %ProgramFiles(x86)%\adguard\is-hms0b.tmp
- %ProgramFiles(x86)%\adguard\is-ikgkf.tmp
- %ProgramFiles(x86)%\adguard\langs\is-b4i0v.tmp
- %ALLUSERSPROFILE%\adguard\ssl\adguard personal ca.cer
- C:\gecici_proje_klasoru\s.exe
- C:\gecici_proje_klasoru\e.exe
- C:\gecici_proje_klasoru\1.exe
- C:\gecici_proje_klasoru\k.png
- %TEMP%\aut400c.tmp
- %ALLUSERSPROFILE%\adguard\adguard.db-journal
- %ProgramFiles(x86)%\adguard\drivers\win10\x64\adgnetworktdidrv.sys
- %ProgramFiles(x86)%\adguard\drivers\win10\x64\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\win10\x86\adgnetworktdidrv.sys
- %ProgramFiles(x86)%\adguard\drivers\win10\x86\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x64\adgnetworktdidrv.sys
- %TEMP%\is-297d2.tmp\wizardform.bitmapimage1.bmp
- %ProgramFiles(x86)%\adguard\drivers\x64\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x64\adguardnetreg.exe
- %ProgramFiles(x86)%\adguard\drivers\x86\adgnetworktdidrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x86\adgnetworkwfpdrv.sys
- %ProgramFiles(x86)%\adguard\drivers\x86\adguardnetlib.dll
- %ProgramFiles(x86)%\adguard\drivers\x86\adguardnetreg.exe
- %WINDIR%\temp\udd1831.tmp
- C:\gecici_proje_klasoru\s.exe
- %ALLUSERSPROFILE%\adguard\core\gm.db-journal
- C:\gecici_proje_klasoru\k.png
- C:\gecici_proje_klasoru\grey.gif
- C:\gecici_proje_klasoru\e.exe
- %TEMP%\aut402d.tmp
- %TEMP%\aut4e8f.tmp
- %TEMP%\aut4ebf.tmp
- %TEMP%\52ff.tmp\s.bat
- %TEMP%\is-297d2.tmp\istask.dll
- %TEMP%\is-297d2.tmp\metroblue.vsf
- %ALLUSERSPROFILE%\adguard\ssl\cert.db-journal
- %ProgramFiles(x86)%\adguard\drivers\x64\adguardnetlib.dll
- %TEMP%\is-297d2.tmp\vclstylesinno.dll
- %TEMP%\is-297d2.tmp\_isetup\_setup64.tmp
- %TEMP%\is-297d2.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-rh6ra.tmp\1.tmp
- %TEMP%\nsg6039.tmp\nact.dll
- %TEMP%\nsg6039.tmp\uac.dll
- C:\gecici_proje_klasoru\1.exe
- %TEMP%\aut401c.tmp
- %TEMP%\is-297d2.tmp\_isetup\_regdll.tmp
- %ALLUSERSPROFILE%\adguard\ssl\cert.db
- from %ProgramFiles(x86)%\adguard\is-eke0o.tmp to %ProgramFiles(x86)%\adguard\unins000.exe
- from %ProgramFiles(x86)%\adguard\langs\is-f27t6.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.he.dll
- from %ProgramFiles(x86)%\adguard\langs\is-mqss8.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.fr.dll
- from %ProgramFiles(x86)%\adguard\langs\is-h8k1g.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.fa.dll
- from %ProgramFiles(x86)%\adguard\langs\is-etvvq.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.es.dll
- from %ProgramFiles(x86)%\adguard\langs\is-29k5a.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.de.dll
- from %ProgramFiles(x86)%\adguard\langs\is-82c2f.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.da.dll
- from %ProgramFiles(x86)%\adguard\langs\is-kouo5.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.cs.dll
- from %ProgramFiles(x86)%\adguard\langs\is-0pck5.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.bg.dll
- from %ProgramFiles(x86)%\adguard\langs\is-1vamp.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.be.dll
- from %ProgramFiles(x86)%\adguard\langs\is-b4i0v.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.ar.dll
- from %ProgramFiles(x86)%\adguard\nss\is-u77t8.tmp to %ProgramFiles(x86)%\adguard\nss\sqlite3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-62src.tmp to %ProgramFiles(x86)%\adguard\nss\softokn3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-qie8r.tmp to %ProgramFiles(x86)%\adguard\nss\smime3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-8mdlv.tmp to %ProgramFiles(x86)%\adguard\nss\nssutil3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-r47a2.tmp to %ProgramFiles(x86)%\adguard\nss\nssdbm3.dll
- from %ProgramFiles(x86)%\adguard\langs\is-461a4.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.hr.dll
- from %ProgramFiles(x86)%\adguard\langs\is-84jk2.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.hu.dll
- from %ProgramFiles(x86)%\adguard\langs\is-g8nk1.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.hy.dll
- from %ProgramFiles(x86)%\adguard\langs\is-pbtr4.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.id.dll
- from %ProgramFiles(x86)%\adguard\langs\is-v2tal.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.zh-tw.dll
- from %ProgramFiles(x86)%\adguard\langs\is-cmfub.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.vi.dll
- from %ProgramFiles(x86)%\adguard\langs\is-kikdb.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.tr.dll
- from %ProgramFiles(x86)%\adguard\langs\is-8hasp.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.sv.dll
- from %ProgramFiles(x86)%\adguard\langs\is-v094t.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.sr.dll
- from %ProgramFiles(x86)%\adguard\langs\is-pqp50.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.sl.dll
- from %ProgramFiles(x86)%\adguard\langs\is-esaqf.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.sk.dll
- from %ProgramFiles(x86)%\adguard\langs\is-c6p08.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.pt.dll
- from %ProgramFiles(x86)%\adguard\langs\is-uu1id.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.ro.dll
- from %ProgramFiles(x86)%\adguard\langs\is-6668l.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.pt-pt.dll
- from %ProgramFiles(x86)%\adguard\langs\is-ubn3p.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.pl.dll
- from %ProgramFiles(x86)%\adguard\langs\is-hretl.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.no.dll
- from %ProgramFiles(x86)%\adguard\langs\is-c2eft.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.nl.dll
- from %ProgramFiles(x86)%\adguard\langs\is-4nfjj.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.ko.dll
- from %ProgramFiles(x86)%\adguard\langs\is-312uj.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.ja.dll
- from %ProgramFiles(x86)%\adguard\langs\is-mk02r.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.it.dll
- from %ProgramFiles(x86)%\adguard\langs\is-atqsh.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.zh.dll
- from %ProgramFiles(x86)%\adguard\nss\is-fnddn.tmp to %ProgramFiles(x86)%\adguard\nss\nssckbi.dll
- from %ProgramFiles(x86)%\adguard\nss\is-4hm6n.tmp to %ProgramFiles(x86)%\adguard\nss\nss3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-tc23o.tmp to %ProgramFiles(x86)%\adguard\nss\libplds4.dll
- from %ProgramFiles(x86)%\adguard\is-2tsbr.tmp to %ProgramFiles(x86)%\adguard\adguardcore.dll
- from %ProgramFiles(x86)%\adguard\is-hms0b.tmp to %ProgramFiles(x86)%\adguard\adguard.ui.dll
- from %ProgramFiles(x86)%\adguard\is-ikgkf.tmp to %ProgramFiles(x86)%\adguard\adguard.tools.exe.manifest
- from %ProgramFiles(x86)%\adguard\is-j95cb.tmp to %ProgramFiles(x86)%\adguard\adguard.tools.exe
- from %ProgramFiles(x86)%\adguard\is-v8f36.tmp to %ProgramFiles(x86)%\adguard\adguard.service.dll
- from %ProgramFiles(x86)%\adguard\is-p48s0.tmp to %ProgramFiles(x86)%\adguard\adguard.network.dll
- from %ProgramFiles(x86)%\adguard\is-606uk.tmp to %ProgramFiles(x86)%\adguard\adguard.ipc.dll
- from %ProgramFiles(x86)%\adguard\is-g563p.tmp to %ProgramFiles(x86)%\adguard\adguard.global.dll
- from %ProgramFiles(x86)%\adguard\is-9eonl.tmp to %ProgramFiles(x86)%\adguard\adguard.exe.manifest
- from %ProgramFiles(x86)%\adguard\is-1ibdg.tmp to %ProgramFiles(x86)%\adguard\adguard.exe.config
- from %ProgramFiles(x86)%\adguard\is-q6j3g.tmp to %ProgramFiles(x86)%\adguard\adguard.exe
- from %ProgramFiles(x86)%\adguard\is-q28a5.tmp to %ProgramFiles(x86)%\adguard\adguard.core.tools.exe
- from %ProgramFiles(x86)%\adguard\is-3ig5h.tmp to %ProgramFiles(x86)%\adguard\adguard.core.dll
- from %ProgramFiles(x86)%\adguard\is-0j6k2.tmp to %ProgramFiles(x86)%\adguard\adguard.core.common.dll
- from %ProgramFiles(x86)%\adguard\is-ql79e.tmp to %ProgramFiles(x86)%\adguard\adguard.commons.dll
- from %ProgramFiles(x86)%\adguard\is-21bmk.tmp to %ProgramFiles(x86)%\adguard\adguardcoretools.dll
- from %ProgramFiles(x86)%\adguard\is-te42s.tmp to %ProgramFiles(x86)%\adguard\adguardcoretools64.dll
- from %ProgramFiles(x86)%\adguard\is-bl0f8.tmp to %ProgramFiles(x86)%\adguard\adguardsvc.exe
- from %ProgramFiles(x86)%\adguard\is-ii2pc.tmp to %ProgramFiles(x86)%\adguard\adguardsvc.exe.config
- from %ProgramFiles(x86)%\adguard\nss\is-j447f.tmp to %ProgramFiles(x86)%\adguard\nss\libnspr4.dll
- from %ProgramFiles(x86)%\adguard\nss\is-bu8fl.tmp to %ProgramFiles(x86)%\adguard\nss\freebl3.dll
- from %ProgramFiles(x86)%\adguard\nss\is-h98gh.tmp to %ProgramFiles(x86)%\adguard\nss\certutil.exe
- from %ProgramFiles(x86)%\adguard\libs\is-0rm3p.tmp to %ProgramFiles(x86)%\adguard\libs\inststlib64.dll
- from %ProgramFiles(x86)%\adguard\langs\is-odi8s.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.uk.dll
- from %ProgramFiles(x86)%\adguard\langs\is-7jjmu.tmp to %ProgramFiles(x86)%\adguard\langs\adguard.ui.resources.ru.dll
- from %ProgramFiles(x86)%\adguard\is-p326j.tmp to %ProgramFiles(x86)%\adguard\system.windows.interactivity.dll
- from %ProgramFiles(x86)%\adguard\is-fflm5.tmp to %ProgramFiles(x86)%\adguard\sqlite.interop.dll
- from %ProgramFiles(x86)%\adguard\is-td176.tmp to %ProgramFiles(x86)%\adguard\system.data.sqlite.dll
- from %ProgramFiles(x86)%\adguard\is-uk93p.tmp to %ProgramFiles(x86)%\adguard\sharpraven.dll
- from %ProgramFiles(x86)%\adguard\is-d2ak5.tmp to %ProgramFiles(x86)%\adguard\newtonsoft.json.dll
- from %ProgramFiles(x86)%\adguard\is-f8dv9.tmp to %ProgramFiles(x86)%\adguard\microsoft.expression.interactions.dll
- from %ProgramFiles(x86)%\adguard\is-c6rni.tmp to %ProgramFiles(x86)%\adguard\icsharpcode.avalonedit.dll
- from %ProgramFiles(x86)%\adguard\is-2bmhf.tmp to %ProgramFiles(x86)%\adguard\drivers.bin
- from %ProgramFiles(x86)%\adguard\is-an9bg.tmp to %ProgramFiles(x86)%\adguard\default.adg
- from %ProgramFiles(x86)%\adguard\is-oss9c.tmp to %ProgramFiles(x86)%\adguard\adguardsvc.exe.manifest
- from %ProgramFiles(x86)%\adguard\nss\is-sm2bq.tmp to %ProgramFiles(x86)%\adguard\nss\libplc4.dll
- from %ALLUSERSPROFILE%\adguard\is-8grr5.tmp to %ALLUSERSPROFILE%\adguard\adguard.db
- %ALLUSERSPROFILE%\adguard\adguard.db-journal
- %ALLUSERSPROFILE%\adguard\core\gm.db-journal
- %ALLUSERSPROFILE%\adguard\ssl\cert.db-journal
- %ALLUSERSPROFILE%\adguard\ssl\cert.db
- 'localhost':49173
- 'localhost':49175
- 'localhost':49177
- 'localhost':49179
- 'localhost':49181
- 'localhost':49183
- 'localhost':49185
- 'localhost':49187
- 'localhost':49174
- 'localhost':49182
- 'localhost':49186
- 'localhost':49176
- DNS ASK lo###.adguard.org
- DNS ASK ap#.#dguard.com
- ClassName: 'EDIT' WindowName: ''
- 'C:\gecici_proje_klasoru\s.exe'
- 'C:\gecici_proje_klasoru\1.exe' /S
- '%TEMP%\1\1.exe'
- '%TEMP%\is-rh6ra.tmp\1.tmp' /SL5="$50232,26129449,67072,%TEMP%\1\1.exe"
- '%ProgramFiles(x86)%\adguard\adguardsvc.exe'
- 'C:\gecici_proje_klasoru\e.exe'
- '%ProgramFiles(x86)%\adguard\adguard.core.tools.exe' /cert_install "SYSTEM"
- '%ProgramFiles(x86)%\adguard\adguard.core.tools.exe' /drv_install tdi
- '%ProgramFiles(x86)%\adguard\drivers\x64\adguardnetreg.exe' adgnetworktdidrv
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\52FF.tmp\S.bat C:\gecici_proje_klasoru\S.exe"' (with hidden window)
- '%WINDIR%\syswow64\net.exe' stop "Adguard Service"' (with hidden window)
- '%WINDIR%\syswow64\sc.exe' create "Adguard Service" binPath= "%ProgramFiles(x86)%\Adguard\AdguardSvc.exe" start= auto error= ignore DisplayName= "Adguard Service"' (with hidden window)
- '%WINDIR%\syswow64\sc.exe' description "Adguard Service" "This service blocks ads, online counters and dangerous websites by filtering network traffic."' (with hidden window)
- '%WINDIR%\syswow64\sc.exe' start "Adguard Service"' (with hidden window)
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\52FF.tmp\S.bat C:\gecici_proje_klasoru\S.exe"
- '<SYSTEM32>\attrib.exe' +r +h +s "\gecici_proje_klasoru"
- '<SYSTEM32>\attrib.exe' +r +h +s "%TEMP%\1"
- '<SYSTEM32>\attrib.exe' +r +h +s "%TEMP%\1\1"
- '<SYSTEM32>\attrib.exe' +r +h +s "\gecici_proje_klasoru\S.exe"
- '<SYSTEM32>\attrib.exe' +r +h +s "\gecici_proje_klasoru\E.exe"
- '<SYSTEM32>\attrib.exe' +r +h +s "\gecici_proje_klasoru\1.exe"
- '<SYSTEM32>\attrib.exe' +r +h +s "\gecici_proje_klasoru\K.png"
- '%WINDIR%\syswow64\ctfmon.exe'
- '%WINDIR%\syswow64\net1.exe' stop "Adguard Service"
- '%WINDIR%\syswow64\sc.exe' create "Adguard Service" binPath= "%ProgramFiles(x86)%\Adguard\AdguardSvc.exe" start= auto error= ignore DisplayName= "Adguard Service"
- '%WINDIR%\syswow64\sc.exe' description "Adguard Service" "This service blocks ads, online counters and dangerous websites by filtering network traffic."
- '%WINDIR%\syswow64\sc.exe' start "Adguard Service"
- '<SYSTEM32>\sc.exe' query adgnetworktdidrv
- '%WINDIR%\syswow64\sc.exe' sdshow "Adguard Service"
- '%WINDIR%\syswow64\sc.exe' sdset "Adguard Service" D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCRPLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)