Program.PsInfo.15

Technical Information

Malicious functions

Executes the following

'%WINDIR%\syswow64\net.exe' STOP "ASG-Sentry Agent"

Modifies file system

Creates the following files

C:\asg-sentry\agent\asg\asgclient.exe
C:\asg-sentry\agent\plug-in\oracle\oracle_state.bat
C:\asg-sentry\agent\plug-in\oracle\oracletbsusedsize.sql
C:\asg-sentry\agent\plug-in\oracle\oraclestate.sql
C:\asg-sentry\agent\plug-in\number\mac_number.dat
C:\asg-sentry\agent\plug-in\number\disk_number.dat
C:\asg-sentry\agent\plug-in\number\cpu_number.dat
C:\asg-sentry\agent\plug-in\mssql-proxy.s
C:\asg-sentry\agent\plug-in\mssql-proxy.mdb
C:\asg-sentry\agent\plug-in\mib-2.s
C:\asg-sentry\agent\plug-in\mib-2.mdb
C:\asg-sentry\agent\plug-in\logmon.s
C:\asg-sentry\agent\plug-in\logmon.mdb
C:\asg-sentry\agent\plug-in\checkevt.s
C:\asg-sentry\agent\plug-in\checkevt.mdb
C:\asg-sentry\agent\plug-in\oracle\oracle_tbsusedsize.bat
C:\asg-sentry\agent\logs\w32evtlog\system.log
C:\asg-sentry\agent\logs\error\application.log
C:\asg-sentry\agent\logs\debug\sysapp.log
C:\asg-sentry\agent\logs\debug\exwinevt.log
C:\asg-sentry\agent\logs\debug\exssubmit.log
C:\asg-sentry\agent\logs\debug\exsstop.log
C:\asg-sentry\agent\logs\debug\exsstart.log
C:\asg-sentry\agent\logs\debug\exssetup.log
C:\asg-sentry\agent\logs\debug\exsserv.log
C:\asg-sentry\agent\license.txt
C:\asg-sentry\agent\itremove\uninstall.bat
C:\asg-sentry\agent\itremove\itremove.exe
C:\asg-sentry\agent\itremove\itclientremove.rar
C:\asg-sentry\agent\install.txt
C:\asg-sentry\agent\install\system\winuninst.exe
C:\asg-sentry\agent\logs\system.2
C:\asg-sentry\agent\plug-in\oracle\orasizeusedtmp
C:\asg-sentry\agent\plug-in\readme.txt
C:\asg-sentry\agent\plug-in\srie\logs\error\oracle_state.log
C:\asg-sentry\agent\plug-in\srie\sys\getnumbers.exe
C:\asg-sentry\agent\plug-in\srie\sys\mqtrap_disdepth.tst
C:\asg-sentry\agent\plug-in\srie\sys\mqtrap_disstatus.tst
C:\asg-sentry\agent\plug-in\srie\sys\oratbssizeused.conf
C:\asg-sentry\agent\plug-in\srie\sys\process.cf
C:\asg-sentry\agent\plug-in\srie\sys\service.cf
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.2
C:\asg-sentry\agent\plug-in\srie\zk\zkloop
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.3
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.4
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.5
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.6
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.7
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.8
C:\asg-sentry\agent\plug-in\srie\sys\getnumber.txt
C:\asg-sentry\agent\plug-in\srie\scripts\wrtlog.s
C:\asg-sentry\agent\plug-in\srie\scripts\svc_ps_trap.s
C:\asg-sentry\agent\plug-in\srie\scripts\sriemqseqno.s
C:\asg-sentry\agent\plug-in\srie\scripts\srie-mem-proc.s
C:\asg-sentry\agent\plug-in\srie\scripts\resetchlseqno.s
C:\asg-sentry\agent\plug-in\srie\scripts\process.cf
C:\asg-sentry\agent\plug-in\srie\scripts\oracle_trap.s
C:\asg-sentry\agent\plug-in\srie\scripts\number.s
C:\asg-sentry\agent\plug-in\srie\scripts\new_process_check.s
C:\asg-sentry\agent\plug-in\srie\scripts\mqstatus_trap.s.txt
C:\asg-sentry\agent\plug-in\srie\scripts\mqstatus_trap.s
C:\asg-sentry\agent\plug-in\srie\scripts\mqdepth_trap.s
C:\asg-sentry\agent\plug-in\srie\mq\mqtrap_tstque.tmp
C:\asg-sentry\agent\plug-in\srie\logs\sriezk.log
C:\asg-sentry\agent\plug-in\srie\logs\liyanapprun.txt
C:\asg-sentry\agent\plug-in\srie\logs\error\sriemq01.log
C:\asg-sentry\agent\install\system\winstop.exe
C:\asg-sentry\agent\plug-in\srie\zk\zkecho.1
C:\asg-sentry\agent\install\system\winstart.exe
C:\asg-sentry\agent\install\system\fxm-svc.dll
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\psinfobat.bat
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\psinfo.txt
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\psinfo.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\num.dat
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\mynumbersbat.bat
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\mynumbers.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\logmessages.dll
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\licence.txt
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\instsoftware.bat
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\installsoft.vbe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\conf.txt
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\clearevt.vbe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\clearevt.bat
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\checkevt.vbe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\reg.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\checkevt.bat
C:\asg-sentry\agent\install\plug-in\srie-vnc\srie-vnc.inst.s
C:\asg-sentry\agent\install\plug-in\srie-plug\srie-plug.s
C:\asg-sentry\agent\install\plug-in\srie-plug\srie-plug.mib
C:\asg-sentry\agent\install\plug-in\srie-plug\srie-plug.mdb
C:\asg-sentry\agent\install\plug-in\srie-plug\srie-plug.inst.s
C:\asg-sentry\agent\install\plug-in\srie-plug\mcsched.db
C:\asg-sentry\agent\install\plug-in\srie-plug\cgi\exs_admin.mctrlsched.s
C:\asg-sentry\agent\install\plug-in\readme.txt
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\version.txt
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\readme.txt
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\mssql-proxy.s
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\mssql-proxy.mib
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\mssql-proxy.mdb
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\mssql-proxy.inst.s
C:\asg-sentry\agent\install\plug-in\srie-vnc\srie-vnc.s
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\regget.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\regout.lst
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\unins000.dat
C:\asg-sentry\agent\install\system\explugin.exe
C:\asg-sentry\agent\install\system\exserv.exe
C:\asg-sentry\agent\install\system\exsysapp.exe
C:\asg-sentry\agent\install\system\exwinevt.exe
C:\asg-sentry\agent\install\system\fxm-df.dll
C:\asg-sentry\agent\install\system\fxm-ps.dll
C:\asg-sentry\agent\install\system\fxm-tail.dll
C:\asg-sentry\agent\install\system\win9xconhook.dll
C:\asg-sentry\agent\install\system\httpd.exe
C:\asg-sentry\agent\install\system\logo.exe
C:\asg-sentry\agent\install\system\makemib.exe
C:\asg-sentry\agent\install\system\shellink.exe
C:\asg-sentry\agent\install\system\snmx.dll
C:\asg-sentry\agent\install\system\snmxdm.exe
C:\asg-sentry\agent\install\system\exagent.exe
C:\asg-sentry\agent\install\system\chkauth.exe
C:\asg-sentry\agent\install\system\apachecore.dll
C:\asg-sentry\agent\install\plug-in\traplisten\traplisten.s
C:\asg-sentry\agent\install\plug-in\traplisten\traplisten.mib
C:\asg-sentry\agent\install\plug-in\traplisten\traplisten.mdb
C:\asg-sentry\agent\install\plug-in\traplisten\traplisten.inst.s
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\wm_hooks.dll
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\winvnc4.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\winsrie.reg
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\w.vbe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\vncwho.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\vncviewer.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\vncpwd.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\vncpwd.dll
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\vncconfig.exe
C:\asg-sentry\agent\install\plug-in\srie-vnc\vnc\unins000.exe
C:\asg-sentry\agent\install\system\wininst.exe
C:\asg-sentry\agent\plug-in\srie\说明\getnumber.txt
C:\asg-sentry\agent\plug-in\srie\说明\ip地址刷新修改说明.txt
C:\asg-sentry\agent\plug-in\srie\说明\numbers-readme.txt
C:\asg-sentry\agent\scripts\system\exsys_comm.s
C:\asg-sentry\agent\scripts\system\exsys_config.s
C:\asg-sentry\agent\scripts\system\exsys_data.s
C:\asg-sentry\agent\scripts\system\exsys_libform.s
C:\asg-sentry\agent\scripts\system\exsys_plugin.s
C:\asg-sentry\agent\scripts\system\exsys_pluginst.s
C:\asg-sentry\agent\scripts\system\exsys_service.s
C:\asg-sentry\agent\system\chkauth.exe
C:\asg-sentry\agent\scripts\system\exsys_set.win.s
C:\asg-sentry\agent\scripts\system\exsys_status.s
C:\asg-sentry\agent\scripts\system\exsys_stop.s
C:\asg-sentry\agent\scripts\system\exsys_uninst.s
C:\asg-sentry\agent\scripts\system\exsys_users.s
C:\asg-sentry\agent\setup.bat
C:\asg-sentry\agent\scripts\system\exsys_run.s
C:\asg-sentry\agent\system\apachecore.dll
C:\asg-sentry\agent\scripts\cgi\exs_winnt.vmstat.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.tracert.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.top.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.svc.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.ps.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.ping.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.path.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.netstat.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.filesys.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.diskfree.s
C:\asg-sentry\agent\scripts\cgi\exs_winnt.cpu.s
C:\asg-sentry\agent\scripts\cgi\exs_user.remexec.s
C:\asg-sentry\agent\scripts\cgi\exs_user.pref.s
C:\asg-sentry\agent\scripts\cgi\exs_user.passwd.s
C:\asg-sentry\agent\scripts\system\exsys_autoapp.s
nul
C:\asg-sentry\agent\system\exagent.exe
C:\asg-sentry\agent\tmp\ci000284.lpp
C:\asg-sentry\agent\system\winstop.exe
C:\asg-sentry\agent\system\winuninst.exe
C:\asg-sentry\agent\task\sys_compinfo.tak
C:\asg-sentry\agent\uninstall.bat
C:\asg-sentry\agent\version.ini
C:\asg-sentry\agent\version.txt
C:\asg-sentry\agent\vnc\unins000.dat
C:\asg-sentry\agent\system\explugin.exe
C:\asg-sentry\agent\vnc\vncconfig.exe
C:\asg-sentry\agent\vnc\vncviewer.exe
C:\asg-sentry\agent\vnc\winvnc4.exe
C:\asg-sentry\agent\vnc\wm_hooks.dll
C:\asg-sentry\agent\asg\config\asgclientconfig.ini
C:\asg-sentry\agent\tmp\ci000284.cmd
C:\asg-sentry\agent\system\winstart.exe
C:\asg-sentry\agent\system\wininst.exe
C:\asg-sentry\agent\system\exserv.exe
C:\asg-sentry\agent\system\httpd.exe
C:\asg-sentry\agent\system\win9xconhook.dll
C:\asg-sentry\agent\system\snmxdm.exe
C:\asg-sentry\agent\system\snmx.dll
C:\asg-sentry\agent\system\shellink.exe
C:\asg-sentry\agent\system\makemib.exe
C:\asg-sentry\agent\scripts\system\exsys_admin.s
C:\asg-sentry\agent\system\logo.exe
C:\asg-sentry\agent\scripts\cgi\exs_tool.w32logmon.s
C:\asg-sentry\agent\system\fxm-svc.dll
C:\asg-sentry\agent\system\fxm-ps.dll
C:\asg-sentry\agent\system\fxm-df.dll
C:\asg-sentry\agent\system\exwinevt.exe
C:\asg-sentry\agent\system\exsysapp.exe
C:\asg-sentry\agent\system\fxm-tail.dll
C:\asg-sentry\agent\scripts\cgi\exs_tool.top.s
C:\asg-sentry\agent\scripts\cgi\exs_tool.sendtrap.s
C:\asg-sentry\agent\scripts\cgi\exs_tool.remshut.s
C:\asg-sentry\agent\proc\sysapp.pid
C:\asg-sentry\agent\scripts\cgi\exs_apprun.appnew.s
C:\asg-sentry\agent\scripts\cgi\exs_apprun.appmod.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.top.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.search.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.param.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.mctrlsched.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.login.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.license.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.exec.s
C:\asg-sentry\agent\scripts\cgi\exs_admin.access.s
C:\asg-sentry\agent\rexec\1.bat.txt
C:\asg-sentry\agent\readme.txt
C:\asg-sentry\agent\proc\w32evtlog.pid
C:\asg-sentry\agent\proc\vmstat.dat
C:\asg-sentry\agent\proc\startup.dat
C:\asg-sentry\agent\plug-in\trapsnmp.cf
C:\asg-sentry\agent\proc\ps.dat
C:\asg-sentry\agent\proc\logmonstat.dat
C:\asg-sentry\agent\proc\login.dat
C:\asg-sentry\agent\proc\exspid.dat
C:\asg-sentry\agent\proc\df.dat
C:\asg-sentry\agent\proc\cpu.dat
C:\asg-sentry\agent\install\plug-in\old\mssql-proxy\cgi\exs_tool.mssql.s
C:\asg-sentry\agent\plug-in\traplisten.s
C:\asg-sentry\agent\plug-in\traplisten.mdb
C:\asg-sentry\agent\plug-in\srie-plug.s
C:\asg-sentry\agent\plug-in\srie-plug.mdb
C:\asg-sentry\agent\plug-in\srie\说明\服务监控说明.txt
C:\asg-sentry\agent\plug-in\srie\说明\数据库监控设置说明.txt
C:\asg-sentry\agent\plug-in\srie\说明\svc说明.txt
C:\asg-sentry\agent\scripts\cgi\exs_apprun.elmmod.s
C:\asg-sentry\agent\scripts\cgi\exs_info.appindx.s
C:\asg-sentry\agent\scripts\cgi\exs_apprun.elmnew.s
C:\asg-sentry\agent\scripts\cgi\exs_info.sc_winnt.s
C:\asg-sentry\agent\scripts\cgi\exs_pastrun.appd.s
C:\asg-sentry\agent\scripts\cgi\exs_login.cleanup.s
C:\asg-sentry\agent\scripts\cgi\exs_login.lockout.s
C:\asg-sentry\agent\scripts\cgi\exs_login.passwd.s
C:\asg-sentry\agent\scripts\cgi\exs_login.s
C:\asg-sentry\agent\scripts\cgi\exs_login.user.s
C:\asg-sentry\agent\scripts\cgi\exs_login.verify.s
C:\asg-sentry\agent\scripts\cgi\exs_pastrun.elmtd.s
C:\asg-sentry\agent\scripts\cgi\exs_apprun.browse.s
C:\asg-sentry\agent\scripts\cgi\exs_pastrun.top.s
C:\asg-sentry\agent\scripts\cgi\exs_remexec.s
C:\asg-sentry\agent\scripts\cgi\exs_submit.s
C:\asg-sentry\agent\scripts\cgi\exs_tool.logmon.s
C:\asg-sentry\agent\scripts\cgi\exs_tool.logview.s
C:\asg-sentry\agent\scripts\cgi\exs_tool.plist.s
C:\asg-sentry\agent\scripts\cgi\exs_login.audit.s
C:\asg-sentry\agent\scripts\cgi\exs_info.user.s
C:\asg-sentry\agent\scripts\cgi\exs_info.object.s
C:\asg-sentry\agent\scripts\cgi\exs_info.manual.s
C:\asg-sentry\agent\scripts\cgi\exs_info.index.s
C:\asg-sentry\agent\scripts\cgi\exs_info.help.s
C:\asg-sentry\agent\scripts\cgi\exs_info.file.s
C:\asg-sentry\agent\scripts\cgi\exs_graph.top.s
C:\asg-sentry\agent\scripts\cgi\exs_apprun.top.s
C:\asg-sentry\agent\scripts\cgi\exs_apprun.elmt.s
C:\asg-sentry\agent\scripts\cgi\exs_diag.top.s
C:\asg-sentry\agent\scripts\cgi\exs_diag.remote.s
C:\asg-sentry\agent\scripts\cgi\exs_data.s
C:\asg-sentry\agent\scripts\cgi\exs_btable.s
C:\asg-sentry\agent\scripts\cgi\exs_browser.s
C:\asg-sentry\agent\scripts\cgi\exs_info.senagt.s
C:\asg-sentry\agent\scripts\cgi\exs_filesys.lib.s
C:\asg-sentry\agent\vnc\logmessages.dll
C:\asg-sentry\agent\install\plug-in\old\mib-2\mib-2.s
C:\asg-sentry\agent\install\plug-in\old\logmon\exec\fxm-tail.dll
C:\asg-sentry\agent\html\help\exs_apprun.elmtd.html
C:\asg-sentry\agent\html\help\exs_apprun.elmt.html
C:\asg-sentry\agent\html\help\exs_apprun.elmnew.html
C:\asg-sentry\agent\html\help\exs_apprun.elmmod.html
C:\asg-sentry\agent\html\help\exs_apprun.browse.html
C:\asg-sentry\agent\html\help\exs_apprun.appnew.html
C:\asg-sentry\agent\html\help\exs_apprun.appmod.html
C:\asg-sentry\agent\html\help\exs_apprun.appd.html
C:\asg-sentry\agent\html\help\exs_appindex.html
C:\asg-sentry\agent\html\help\exs_admin.top.html
C:\asg-sentry\agent\html\help\exs_admin.param.html
C:\asg-sentry\agent\html\help\exs_admin.login.html
C:\asg-sentry\agent\html\help\exs_admin.exec.html
C:\asg-sentry\agent\html\help\exs_admin.access.html
C:\asg-sentry\agent\html\help\exs_apprun.top.html
C:\asg-sentry\agent\html\default.htm
C:\asg-sentry\agent\html\apps\http_error.html
C:\asg-sentry\agent\html\apps\header.html
C:\asg-sentry\agent\html\apps\exs_setup.sysapp.html
C:\asg-sentry\agent\html\apps\exs_setup.plugin.html
C:\asg-sentry\agent\html\apps\exs_setup.login.html
C:\asg-sentry\agent\html\apps\exs_eval.html
C:\asg-sentry\agent\html\apps\exs_custom.html
C:\asg-sentry\agent\html\apps\exs_apps.top.html
C:\asg-sentry\agent\doc\sysapp.txt
C:\asg-sentry\agent\doc\sentry-agent.txt
C:\asg-sentry\agent\doc\plug-in.txt
C:\asg-sentry\agent\doc\packager.txt
C:\asg-sentry\agent\doc\exsadmin.txt
C:\asg-sentry\agent\conf\user\usrcf.1
C:\asg-sentry\agent\html\default.css
C:\asg-sentry\agent\html\help\exs_appset.top.html
C:\asg-sentry\agent\html\help\exs_browser.html
C:\asg-sentry\agent\html\help\exs_btable.html
C:\asg-sentry\agent\html\help\exs_tool.w32logmon.html
C:\asg-sentry\agent\html\help\exs_user.ntop.html
C:\asg-sentry\agent\html\help\exs_user.passwd.html
C:\asg-sentry\agent\html\help\exs_user.pref.html
C:\asg-sentry\agent\html\help\exs_wildcards.html
C:\asg-sentry\agent\html\help\exs_winnt.cpu.html
C:\asg-sentry\agent\html\help\exs_winnt.filesys.html
C:\asg-sentry\agent\html\help\exs_winnt.tracert.html
C:\asg-sentry\agent\html\help\exs_winnt.index.html
C:\asg-sentry\agent\html\help\exs_winnt.netstat.html
C:\asg-sentry\agent\html\help\exs_winnt.path.html
C:\asg-sentry\agent\html\help\exs_winnt.ps.html
C:\asg-sentry\agent\html\help\exs_winnt.svc.html
C:\asg-sentry\agent\html\help\exs_winnt.top.html
C:\asg-sentry\agent\html\help\exs_tool.top.html
C:\asg-sentry\agent\html\help\exs_tool.logview.html
C:\asg-sentry\agent\html\help\exs_tool.logmon.html
C:\asg-sentry\agent\html\help\exs_snmpv3.html
C:\asg-sentry\agent\html\help\exs_snmp.html
C:\asg-sentry\agent\html\help\exs_plugin.html
C:\asg-sentry\agent\html\help\exs_pastrun.top.html
C:\asg-sentry\agent\html\help\exs_pastrun.elmtd.html
C:\asg-sentry\agent\html\help\exs_pastrun.appd.html
C:\asg-sentry\agent\html\help\exs_overview.html
C:\asg-sentry\agent\html\help\exs_manual.winnt.html
C:\asg-sentry\agent\html\help\exs_manual.top.sav.html
C:\asg-sentry\agent\html\help\exs_manual.indx.html
C:\asg-sentry\agent\html\help\exs_logout.top.html
C:\asg-sentry\agent\html\help\exs_info.manual.html
C:\asg-sentry\agent\html\help\exs_diag.top.html
C:\asg-sentry\agent\html\help\exs_diag.remote.html
C:\asg-sentry\agent\conf\reg\userdef.db
C:\asg-sentry\agent\html\help\exs_winnt.diskfree.html
C:\asg-sentry\agent\conf\reg\uninst.db
C:\asg-sentry\agent\conf\exagent\tool.db
C:\asg-sentry\agent\bin\install.bat
C:\asg-sentry\agent\bin\exsuninst.exe
C:\asg-sentry\agent\bin\exsstop.exe
C:\asg-sentry\agent\bin\exsstart.exe
C:\asg-sentry\agent\bin\exssetup.exe
C:\asg-sentry\agent\bin\exsadmin.exe
C:\asg-sentry\agent\bin\editxphost.bat
C:\asg-sentry\agent\bin\editw2host.bat
C:\asg-sentry\agent\asg\plug-in\taskmanager.exe
C:\asg-sentry\agent\asg\plug-in\sysevent.exe
C:\asg-sentry\agent\asg\plug-in\servicecontrol.bat
C:\asg-sentry\agent\asg\plug-in\rebootw.exe
C:\asg-sentry\agent\asg\plug-in\processinformation.exe
C:\asg-sentry\agent\asg\plug-in\mqstatus.tst
C:\asg-sentry\agent\bin\killstartit.bat
C:\asg-sentry\agent\asg\plug-in\mqstatus.bat
C:\asg-sentry\agent\asg\plug-in\mqdepth.bat
C:\asg-sentry\agent\asg\plug-in\getservername.exe
C:\asg-sentry\agent\asg\plug-in\fxm-svc.exe
C:\asg-sentry\agent\asg\plug-in\computerinfo.exe
C:\asg-sentry\agent\asg\config\event\sysevent.ini
C:\asg-sentry\agent\asg\config\event\director.ini
C:\asg-sentry\agent\asg\config\event\asgsentry.ini
C:\asg-sentry\agent\asg\config\emsconfig.ini
C:\asg-sentry\agent\asg\config\asgmonitorconfig.ini
C:\asg-sentry\agent\asg\backup\udtasgems.bat
C:\asg-sentry\agent\asg\backup\udtasgclt.bat
C:\asg-sentry\agent\asg\asgems.exe
C:\asg-sentry\agent\asg\asgcmonitor.exe
C:\asg-sentry\agent\asg\asgclientctr.bat
C:\asg-sentry\agent\asg\plug-in\mqdepth.tst
C:\asg-sentry\agent\bin\mynumbers.exe
C:\asg-sentry\agent\bin\startasg.bat
C:\asg-sentry\agent\bin\startasg.bat.bak
C:\asg-sentry\agent\conf\exagent\parm.db
C:\asg-sentry\agent\conf\exagent\path.db
C:\asg-sentry\agent\conf\exagent\plugin.cf
C:\asg-sentry\agent\conf\exagent\setup.db
C:\asg-sentry\agent\conf\exagent\setupbak.db
C:\asg-sentry\agent\conf\exagent\snmp.cf
C:\asg-sentry\agent\conf\exagent\winnt.db
C:\asg-sentry\agent\conf\reg\diag.db
C:\asg-sentry\agent\conf\httpd\access.conf
C:\asg-sentry\agent\conf\httpd\httpd.conf
C:\asg-sentry\agent\conf\httpd\mime.types
C:\asg-sentry\agent\conf\httpd\srm.conf
C:\asg-sentry\agent\conf\reg\auth.db
C:\asg-sentry\agent\conf\reg\build.txt
C:\asg-sentry\agent\conf\exagent\mib.db
C:\asg-sentry\agent\conf\exagent\menubar.db
C:\asg-sentry\agent\conf\exagent\mcsched.db
C:\asg-sentry\agent\conf\exagent\keyword.db
C:\asg-sentry\agent\conf\exagent\exec.db
C:\asg-sentry\agent\conf\exagent\cgi-arg.db
C:\asg-sentry\agent\conf\exagent\asn.1
C:\asg-sentry\agent\conf\exagent\access.db
C:\asg-sentry\agent\cgi\readme.txt
C:\asg-sentry\agent\cgi\fxm.exe
C:\asg-sentry\agent\cgi\exs.exe
C:\asg-sentry\agent\bin\uninstall.bat
C:\asg-sentry\agent\bin\test.bat
C:\asg-sentry\agent\bin\stopvc.bat
C:\asg-sentry\agent\bin\stopasg.bat
C:\asg-sentry\agent\bin\startvcnopwd.bat
C:\asg-sentry\agent\bin\startvc.bat
C:\asg-sentry\agent\conf\reg\execdef.db
C:\asg-sentry\agent\html\help\exs_winnt.vmstat.html
C:\asg-sentry\agent\html\help\header.html
C:\asg-sentry\agent\html\images\asg_logo.gif
C:\asg-sentry\agent\install\exagent\asn.1
C:\asg-sentry\agent\install\exagent\cgi-arg.db
C:\asg-sentry\agent\install\exagent\exec.db
C:\asg-sentry\agent\install\exagent\exec.db.bak
C:\asg-sentry\agent\install\exagent\keyword.db
C:\asg-sentry\agent\install\exagent\mcsched.db
C:\asg-sentry\agent\install\exagent\mib.db
C:\asg-sentry\agent\install\exagent\tool.db
C:\asg-sentry\agent\install\exagent\parm.db
C:\asg-sentry\agent\install\exagent\path.db
C:\asg-sentry\agent\install\exagent\plugin.cf
C:\asg-sentry\agent\install\exagent\setup.db
C:\asg-sentry\agent\install\exagent\setup.db.bak
C:\asg-sentry\agent\install\exagent\setupbak.db
C:\asg-sentry\agent\install\exagent\menubar.db
C:\asg-sentry\agent\install\exagent\snmp.cf
C:\asg-sentry\agent\install\espaniol\tool.db
C:\asg-sentry\agent\install\espaniol\setup.db
C:\asg-sentry\agent\install\espaniol\menubar.db
C:\asg-sentry\agent\install\espaniol\leame.txt
C:\asg-sentry\agent\install\conf\userdef.db
C:\asg-sentry\agent\html\readme.txt
C:\asg-sentry\agent\html\public\header.html
C:\asg-sentry\agent\html\mibs\traplisten.mib
C:\asg-sentry\agent\html\mibs\sysapp.mib
C:\asg-sentry\agent\html\mibs\srie-plug.mib
C:\asg-sentry\agent\html\mibs\readme.txt
C:\asg-sentry\agent\html\mibs\plugin.mib
C:\asg-sentry\agent\html\mibs\mssql-proxy.mib
C:\asg-sentry\agent\html\mibs\mib-2.mib
C:\asg-sentry\agent\install\exagent\access.db
C:\asg-sentry\agent\install\plug-in\old\mib-2\mib-2.mdb
C:\asg-sentry\agent\install\exagent\winnt.db
C:\asg-sentry\agent\install\plug-in\old\mib-2\mib-2.inst.s
C:\asg-sentry\agent\install\plug-in\itsm-app\itsm-app_2.mib
C:\asg-sentry\agent\install\plug-in\itsm-app\itsm-app_bak.mib
C:\asg-sentry\agent\install\plug-in\itsm-app\process.cf
C:\asg-sentry\agent\install\plug-in\itsm-app\server.cf
C:\asg-sentry\agent\install\plug-in\itsm-app\trapsnmp.cf
C:\asg-sentry\agent\install\plug-in\old\logmon\cgi\exs_tool.logmon.s
C:\asg-sentry\agent\install\plug-in\old\logmon\help\exs_tool.logmon.html
C:\asg-sentry\agent\install\html\default.css
C:\asg-sentry\agent\install\plug-in\old\logmon\logmon.inst.s
C:\asg-sentry\agent\install\plug-in\old\logmon\logmon.mdb
C:\asg-sentry\agent\install\plug-in\old\logmon\logmon.mib
C:\asg-sentry\agent\install\plug-in\old\logmon\logmon.s
C:\asg-sentry\agent\install\plug-in\old\logmon\readme.txt
C:\asg-sentry\agent\install\plug-in\old\mib-2\mb2inst.txt
C:\asg-sentry\agent\install\plug-in\itsm-app\itsm-app.s
C:\asg-sentry\agent\install\plug-in\itsm-app\itsm-app.inst.s
C:\asg-sentry\agent\install\html\index_exs.html
C:\asg-sentry\agent\install\mib\logmon.mib
C:\asg-sentry\agent\install\plug-in\checkevt\checkevt.s
C:\asg-sentry\agent\install\plug-in\checkevt\checkevt.mib
C:\asg-sentry\agent\install\plug-in\checkevt\checkevt.mdb
C:\asg-sentry\agent\install\plug-in\checkevt\checkevt.inst.s
C:\asg-sentry\agent\install\mib\sysapp.mib
C:\asg-sentry\agent\install\espaniol\winnt.db
C:\asg-sentry\agent\install\mib\plugin.mib
C:\asg-sentry\agent\html\mibs\logmon.mib
C:\asg-sentry\agent\install\mib\!caution-readme.txt
C:\asg-sentry\agent\install\httpd\srm.conf
C:\asg-sentry\agent\install\httpd\mime.types
C:\asg-sentry\agent\install\httpd\httpd.conf
C:\asg-sentry\agent\install\httpd\access.conf
C:\asg-sentry\agent\install\mib\exagent.mib
C:\asg-sentry\agent\html\mibs\itsm-app.mib
C:\asg-sentry\agent\html\mibs\header.html
C:\asg-sentry\agent\html\mibs\checkevt.mib
C:\asg-sentry\agent\html\images\green_cpudiag.gif
C:\asg-sentry\agent\html\images\magenta_alarmicon.jpg
C:\asg-sentry\agent\html\images\magentasquare.gif
C:\asg-sentry\agent\html\images\magentaball.gif
C:\asg-sentry\agent\html\images\helpfile.gif
C:\asg-sentry\agent\html\images\header.html
C:\asg-sentry\agent\html\images\green_procdiag.gif
C:\asg-sentry\agent\html\images\green_neticon.jpg
C:\asg-sentry\agent\html\images\green_netdiag.gif
C:\asg-sentry\agent\html\images\green_memicon.jpg
C:\asg-sentry\agent\html\images\green_memdiag.gif
C:\asg-sentry\agent\html\images\green_filediag.gif
C:\asg-sentry\agent\html\images\green_dskdiag.gif
C:\asg-sentry\agent\html\images\green_diskicon.jpg
C:\asg-sentry\agent\html\images\green_cpuicon.jpg
C:\asg-sentry\agent\html\images\green_appicon.jpg
C:\asg-sentry\agent\html\images\cyan_netdiag.gif
C:\asg-sentry\agent\html\images\green_alarmicon.jpg
C:\asg-sentry\agent\html\images\greensquare.gif
C:\asg-sentry\agent\html\images\greenball.gif
C:\asg-sentry\agent\html\images\folder.gif
C:\asg-sentry\agent\html\images\event.gif
C:\asg-sentry\agent\html\images\cyan_procdiag.gif
C:\asg-sentry\agent\install\plug-in\old\mib-2\mib-2.mib
C:\asg-sentry\agent\html\images\cyan_memdiag.gif
C:\asg-sentry\agent\html\images\cyan_filediag.gif
C:\asg-sentry\agent\html\images\cyan_dskdiag.gif
C:\asg-sentry\agent\html\images\cyan_cpudiag.gif
C:\asg-sentry\agent\html\images\cyanbar.gif
C:\asg-sentry\agent\html\images\cyanball.gif
C:\asg-sentry\agent\html\images\cabinet.gif
C:\asg-sentry\agent\html\images\magenta_cpuicon.jpg
C:\asg-sentry\agent\html\images\red_cpudiag.gif
C:\asg-sentry\agent\html\images\magenta_diskicon.jpg
C:\asg-sentry\agent\html\images\shortcut.gif
C:\asg-sentry\agent\html\images\yellowsquare.gif
C:\asg-sentry\agent\html\images\up_arrow.gif
C:\asg-sentry\agent\html\images\user_logo.gif
C:\asg-sentry\agent\html\images\warning.gif
C:\asg-sentry\agent\html\images\whiteball.gif
C:\asg-sentry\agent\html\images\whitesquare.gif
C:\asg-sentry\agent\html\images\yellowball.gif
C:\asg-sentry\agent\html\images\yellow_cpudiag.gif
C:\asg-sentry\agent\html\images\magenta_appicon.jpg
C:\asg-sentry\agent\html\images\yellow_dskdiag.gif
C:\asg-sentry\agent\html\images\yellow_filediag.gif
C:\asg-sentry\agent\html\images\yellow_memdiag.gif
C:\asg-sentry\agent\html\images\yellow_netdiag.gif
C:\asg-sentry\agent\html\images\yellow_procdiag.gif
C:\asg-sentry\agent\html\index.html
C:\asg-sentry\agent\html\images\stop.gif
C:\asg-sentry\agent\html\images\spacer_diag.gif
C:\asg-sentry\agent\html\images\red_procdiag.gif
C:\asg-sentry\agent\html\images\red_netdiag.gif
C:\asg-sentry\agent\html\images\red_memdiag.gif
C:\asg-sentry\agent\html\images\red_filediag.gif
C:\asg-sentry\agent\html\images\red_dskdiag.gif
C:\asg-sentry\agent\html\images\redsquare.gif
C:\asg-sentry\agent\html\images\magenta_neticon.jpg
C:\asg-sentry\agent\html\images\magenta_memicon.jpg
C:\asg-sentry\agent\html\images\rd_star.gif
C:\asg-sentry\agent\html\images\orangeball.gif
C:\asg-sentry\agent\html\images\note.gif
C:\asg-sentry\agent\html\images\noaccess.gif
C:\asg-sentry\agent\html\images\modified.gif
C:\asg-sentry\agent\html\images\snmx_logo.gif
C:\asg-sentry\agent\html\images\redball.gif
C:\asg-sentry\agent\tmp\ci000284.sys

Deletes the following files

C:\asg-sentry\agent\conf\exagent\snmp.cf
C:\asg-sentry\agent\proc\df.dat
C:\asg-sentry\agent\proc\ps.dat
C:\asg-sentry\agent\tmp\ci000284.sys
C:\asg-sentry\agent\tmp\ci000284.cmd
C:\asg-sentry\agent\tmp\ci000284.lpp
C:\asg-sentry\agent\conf\exagent\plugin.cf

Substitutes the following files

C:\asg-sentry\agent\tmp\ci000284.sys

Miscellaneous

Searches for the following windows

ClassName: 'EDIT' WindowName: ''

Creates and executes the following

'C:\asg-sentry\agent\install\system\snmxdm.exe' ./scripts/system/exsys_set.win.s -p 8161 public write localhost public y 8161 y admin passkey encryptionkey md5
'C:\asg-sentry\agent\system\chkauth.exe'
'C:\asg-sentry\agent\install\system\snmxdm.exe' ./scripts/system/exsys_pluginst.s
'C:\asg-sentry\agent\system\makemib.exe' ./tmp/asn1.tmp -o ./tmp/mibdb.tmp

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c ""C:\ASG-Sentry\Agent\setup.bat" "
'%WINDIR%\syswow64\net1.exe' STOP "ASG-Sentry Agent"
'%WINDIR%\syswow64\cmd.exe' /c chkauth > .\tmp.\CI000284.SYS
'%WINDIR%\syswow64\cmd.exe' /c CLS
'%WINDIR%\syswow64\cmd.exe' /c .\system\makemib.exe ./tmp/asn1.tmp -o ./tmp/mibdb.tmp
'%WINDIR%\syswow64\cmd.exe' /c copy .\install\plug-in\srie-plug\mcsched.db .\conf\exagent\mcsched.db > .\tmp.\CI0003e0.SYS

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней