Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adguard' = '%ProgramFiles%\Adguard\Adguard.exe /nosplash'
- [<HKLM>\SYSTEM\ControlSet001\Services\Adguard Service] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Adguard Service] 'ImagePath' = '%ProgramFiles%\Adguard\AdguardSvc.exe'
- '<SYSTEM32>\net.exe' stop "Adguard Service"
- %TEMP%\7ZipSfx.000\Adguard 6.2.437.2171.exe
- %ProgramFiles%\Adguard\is-MTNBN.tmp
- %ProgramFiles%\Adguard\is-55ONJ.tmp
- %ProgramFiles%\Adguard\is-8FJF5.tmp
- %ProgramFiles%\Adguard\is-PD4I8.tmp
- %ProgramFiles%\Adguard\langs\is-SJR3U.tmp
- %ProgramFiles%\Adguard\langs\is-SUP7L.tmp
- %ProgramFiles%\Adguard\langs\is-SNQID.tmp
- %ProgramFiles%\Adguard\langs\is-P0V1G.tmp
- %ProgramFiles%\Adguard\libs\is-4BIB5.tmp
- %ProgramFiles%\Adguard\nss\is-HNBIP.tmp
- %ProgramFiles%\Adguard\nss\is-03DD2.tmp
- %ProgramFiles%\Adguard\nss\is-THGLM.tmp
- %ProgramFiles%\Adguard\is-D013I.tmp
- %ProgramFiles%\Adguard\is-S8M97.tmp
- %ProgramFiles%\Adguard\nss\is-FUBR5.tmp
- %ProgramFiles%\Adguard\nss\is-50S1J.tmp
- %ProgramFiles%\Adguard\nss\is-N1CHL.tmp
- %ProgramFiles%\Adguard\nss\is-FPSH8.tmp
- %ProgramFiles%\Adguard\nss\is-5P7RG.tmp
- %ProgramFiles%\Adguard\nss\is-22HBU.tmp
- %ProgramFiles%\Adguard\nss\is-PKTGE.tmp
- %ALLUSERSPROFILE%\Application Data\Adguard\is-KUH24.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\Adguard\Adguard.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Adguard\Uninstall.lnk
- %ProgramFiles%\Adguard\unins000.dat
- %TEMP%\aut1.tmp
- %TEMP%\ljpssnj
- %ProgramFiles%\Adguard\nss\is-H0HPN.tmp
- %ProgramFiles%\Adguard\nss\is-50E2R.tmp
- %ProgramFiles%\Adguard\is-9HGLS.tmp
- %ProgramFiles%\Adguard\is-UD0CP.tmp
- %ProgramFiles%\Adguard\is-3RARK.tmp
- %TEMP%\is-HC4RM.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-HC4RM.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-HC4RM.tmp\ISTask.dll
- %TEMP%\is-HC4RM.tmp\VclStylesInno.dll
- %TEMP%\is-HC4RM.tmp\MetroBlue.vsf
- %TEMP%\is-HC4RM.tmp\WizardForm.BitmapImage1.bmp
- %ProgramFiles%\Adguard\is-2CA6E.tmp
- %ProgramFiles%\Adguard\libs\is-K7GKB.tmp
- %ProgramFiles%\Adguard\is-5JJJ7.tmp
- %ProgramFiles%\Adguard\is-55OBQ.tmp
- %ProgramFiles%\Adguard\is-6J5TU.tmp
- %ProgramFiles%\Adguard\is-0IUCS.tmp
- %ProgramFiles%\Adguard\is-DT7SP.tmp
- %TEMP%\is-4B709.tmp\Adguard 6.2.437.2171.tmp
- %ProgramFiles%\Adguard\is-HNB6L.tmp
- %ProgramFiles%\Adguard\is-FMGIH.tmp
- %ProgramFiles%\Adguard\is-7P6O2.tmp
- %ProgramFiles%\Adguard\is-DKPA2.tmp
- %ProgramFiles%\Adguard\is-C3GJ6.tmp
- %ProgramFiles%\Adguard\is-7SHD2.tmp
- %ProgramFiles%\Adguard\is-0QRBQ.tmp
- %ProgramFiles%\Adguard\is-QTINM.tmp
- %ProgramFiles%\Adguard\is-BTBED.tmp
- %ProgramFiles%\Adguard\is-SQ288.tmp
- %ProgramFiles%\Adguard\is-4F4IN.tmp
- %ProgramFiles%\Adguard\is-O59LB.tmp
- %ProgramFiles%\Adguard\is-9AA9N.tmp
- %ProgramFiles%\Adguard\is-B1PJR.tmp
- %ProgramFiles%\Adguard\is-ST6R9.tmp
- %ProgramFiles%\Adguard\libs\blhe.ini
- <DRIVERS>\etc\BACKUP\hosts_2018-06-20_18-02-45.txt
- %TEMP%\aut1.tmp
- %TEMP%\ljpssnj
- from %ProgramFiles%\Adguard\is-2CA6E.tmp to %ProgramFiles%\Adguard\unins000.exe
- from %ProgramFiles%\Adguard\is-S8M97.tmp to %ProgramFiles%\Adguard\Microsoft.Expression.Interactions.dll
- from %ProgramFiles%\Adguard\is-MTNBN.tmp to %ProgramFiles%\Adguard\Newtonsoft.Json.dll
- from %ProgramFiles%\Adguard\is-55ONJ.tmp to %ProgramFiles%\Adguard\SQLite.Interop.dll
- from %ProgramFiles%\Adguard\is-8FJF5.tmp to %ProgramFiles%\Adguard\System.Data.SQLite.dll
- from %ProgramFiles%\Adguard\is-PD4I8.tmp to %ProgramFiles%\Adguard\System.Windows.Interactivity.dll
- from %ProgramFiles%\Adguard\langs\is-SJR3U.tmp to %ProgramFiles%\Adguard\langs\Adguard.Filter.resources.ru.dll
- from %ProgramFiles%\Adguard\langs\is-SUP7L.tmp to %ProgramFiles%\Adguard\langs\Adguard.Filter.resources.uk.dll
- from %ProgramFiles%\Adguard\langs\is-SNQID.tmp to %ProgramFiles%\Adguard\langs\Adguard.UI.resources.ru.dll
- from %ProgramFiles%\Adguard\langs\is-P0V1G.tmp to %ProgramFiles%\Adguard\langs\Adguard.UI.resources.uk.dll
- from %ProgramFiles%\Adguard\libs\is-4BIB5.tmp to %ProgramFiles%\Adguard\libs\inststlib64.dll
- from %ProgramFiles%\Adguard\nss\is-HNBIP.tmp to %ProgramFiles%\Adguard\nss\certutil.exe
- from %ProgramFiles%\Adguard\nss\is-03DD2.tmp to %ProgramFiles%\Adguard\nss\freebl3.dll
- from %ProgramFiles%\Adguard\nss\is-THGLM.tmp to %ProgramFiles%\Adguard\nss\libnspr4.dll
- from %ProgramFiles%\Adguard\nss\is-FUBR5.tmp to %ProgramFiles%\Adguard\nss\libplc4.dll
- from %ProgramFiles%\Adguard\nss\is-H0HPN.tmp to %ProgramFiles%\Adguard\nss\libplds4.dll
- from %ProgramFiles%\Adguard\nss\is-50E2R.tmp to %ProgramFiles%\Adguard\nss\nss3.dll
- from %ProgramFiles%\Adguard\nss\is-50S1J.tmp to %ProgramFiles%\Adguard\nss\nssckbi.dll
- from %ProgramFiles%\Adguard\nss\is-N1CHL.tmp to %ProgramFiles%\Adguard\nss\nssdbm3.dll
- from %ProgramFiles%\Adguard\nss\is-FPSH8.tmp to %ProgramFiles%\Adguard\nss\nssutil3.dll
- from %ProgramFiles%\Adguard\nss\is-5P7RG.tmp to %ProgramFiles%\Adguard\nss\smime3.dll
- from %ProgramFiles%\Adguard\nss\is-22HBU.tmp to %ProgramFiles%\Adguard\nss\softokn3.dll
- from %ProgramFiles%\Adguard\is-D013I.tmp to %ProgramFiles%\Adguard\ICSharpCode.AvalonEdit.dll
- from %ProgramFiles%\Adguard\nss\is-PKTGE.tmp to %ProgramFiles%\Adguard\nss\sqlite3.dll
- from %ProgramFiles%\Adguard\is-9HGLS.tmp to %ProgramFiles%\Adguard\drivers.bin
- from %ProgramFiles%\Adguard\is-3RARK.tmp to %ProgramFiles%\Adguard\Brotli.NET.dll
- from %ProgramFiles%\Adguard\libs\is-K7GKB.tmp to %ProgramFiles%\Adguard\libs\blhe.exe
- from %ProgramFiles%\Adguard\is-5JJJ7.tmp to %ProgramFiles%\Adguard\Adguard.Commons.dll
- from %ProgramFiles%\Adguard\is-55OBQ.tmp to %ProgramFiles%\Adguard\Adguard.exe
- from %ProgramFiles%\Adguard\is-6J5TU.tmp to %ProgramFiles%\Adguard\Adguard.exe.config
- from %ProgramFiles%\Adguard\is-0IUCS.tmp to %ProgramFiles%\Adguard\Adguard.exe.manifest
- from %ProgramFiles%\Adguard\is-DT7SP.tmp to %ProgramFiles%\Adguard\Adguard.Filter.dll
- from %ProgramFiles%\Adguard\is-HNB6L.tmp to %ProgramFiles%\Adguard\Adguard.Global.dll
- from %ProgramFiles%\Adguard\is-ST6R9.tmp to %ProgramFiles%\Adguard\Adguard.Ipc.dll
- from %ProgramFiles%\Adguard\is-FMGIH.tmp to %ProgramFiles%\Adguard\Adguard.Network.dll
- from %ProgramFiles%\Adguard\is-7P6O2.tmp to %ProgramFiles%\Adguard\Adguard.Safebrowsing.dll
- from %ProgramFiles%\Adguard\is-DKPA2.tmp to %ProgramFiles%\Adguard\Adguard.Service.dll
- from %ProgramFiles%\Adguard\is-C3GJ6.tmp to %ProgramFiles%\Adguard\Adguard.Tools.exe
- from %ProgramFiles%\Adguard\is-7SHD2.tmp to %ProgramFiles%\Adguard\Adguard.Tools.exe.manifest
- from %ProgramFiles%\Adguard\is-0QRBQ.tmp to %ProgramFiles%\Adguard\Adguard.UI.dll
- from %ProgramFiles%\Adguard\is-QTINM.tmp to %ProgramFiles%\Adguard\AdguardNetApi.dll
- from %ProgramFiles%\Adguard\is-BTBED.tmp to %ProgramFiles%\Adguard\AdguardNetLib.dll
- from %ProgramFiles%\Adguard\is-SQ288.tmp to %ProgramFiles%\Adguard\AdguardSvc.exe
- from %ProgramFiles%\Adguard\is-4F4IN.tmp to %ProgramFiles%\Adguard\AdguardSvc.exe.config
- from %ProgramFiles%\Adguard\is-O59LB.tmp to %ProgramFiles%\Adguard\AdguardSvc.exe.manifest
- from %ProgramFiles%\Adguard\is-9AA9N.tmp to %ProgramFiles%\Adguard\brolib32.dll
- from %ProgramFiles%\Adguard\is-B1PJR.tmp to %ProgramFiles%\Adguard\brolib64.dll
- from %ProgramFiles%\Adguard\is-UD0CP.tmp to %ProgramFiles%\Adguard\default.db
- from %ALLUSERSPROFILE%\Application Data\Adguard\is-KUH24.tmp to %ALLUSERSPROFILE%\Application Data\Adguard\adguard.db
- '%TEMP%\7ZipSfx.000\Adguard 6.2.437.2171.exe' /SILENT /VERYSILENT
- '%TEMP%\is-4B709.tmp\Adguard 6.2.437.2171.tmp' /SL5="$40036,31533870,67072,%TEMP%\7ZipSfx.000\Adguard 6.2.437.2171.exe" /SILENT /VERYSILENT
- '%ProgramFiles%\Adguard\libs\blhe.exe' /a api.adguard.com
- '<SYSTEM32>\net1.exe' stop "Adguard Service"
- '<SYSTEM32>\ipconfig.exe' /flushdns
- '<SYSTEM32>\sc.exe' create "Adguard Service" binPath= "%ProgramFiles%\Adguard\AdguardSvc.exe" start= auto error= ignore DisplayName= "Adguard Service"