Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\SoftUpdate] 'Start' = '00000002'
- %WINDIR%\SoftUpdate.exe
- <SYSTEM32>\cmd.exe /c c:\win_pop_flag_27__1.bat
- ClassName: 'AVP.Product_Notification' WindowName: 'Kaspersky Anti-Virus'
- ClassName: 'AVP.Product_Notification' WindowName: 'Kaspersky Anti-Virus: ????'
- ClassName: 'AVP.AlertDialog' WindowName: '???????? ????'
- ClassName: 'AVP.Product_Notification' WindowName: ''
- <SYSTEM32>\sncool2.scr
- C:\win_pop_flag_27__1.bat
- %WINDIR%\SoftUpdate.exe
- %TEMP%\winpop2.ini
- <SYSTEM32>\wp237217.dll
- %WINDIR%\SoftUpdate.exe
- <SYSTEM32>\wp237217.dll
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''