Reanimator (reanimator.

exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: /c

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Keeps your Google software up to date. If this task is disabled or
stopped, your Google software will not be kept up to date, meaning security
vulnerabilities that may arise cannot be fixed and features may not work. This task
uninstalls itself when there is no Google software using it.

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: /ua /installsource scheduler

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Keeps your Google software up to date. If this task is disabled or
stopped, your Google software will not be kept up to date, meaning security
vulnerabilities that may arise cannot be fixed and features may not work. This task
uninstalls itself when there is no Google software using it.

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: %systemroot%\system32\sc.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: start osppsvc

jsp->sPath: Settings.Enabled
jsp->sVal: false

jsp->sPath: RegistrationInfo.Description
jsp->sVal: $(@%systemroot%\system32\osppc.dll,-201)

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Smadav\SM?RTP.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: rtp

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Smadav

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\UnHackMe\hackmon.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: $(Arg0)

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Part of RegRun Suite/UnHackMe software. http://www.greatis.com

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: /c

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Keeps your Google software up to date. If this task is disabled or
stopped, your Google software will not be kept up to date, meaning security
vulnerabilities that may arise cannot be fixed and features may not work. This task
uninstalls itself when there is no Google software using it.

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: /ua /installsource scheduler

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Keeps your Google software up to date. If this task is disabled or
stopped, your Google software will not be kept up to date, meaning security
vulnerabilities that may arise cannot be fixed and features may not work. This task
uninstalls itself when there is no Google software using it.

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: %systemroot%\system32\sc.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: start osppsvc

jsp->sPath: Settings.Enabled
jsp->sVal: false

jsp->sPath: RegistrationInfo.Description
jsp->sVal: $(@%systemroot%\system32\osppc.dll,-201)

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\Smadav\SM?RTP.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: rtp

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Smadav

Reanimator (reanimator.exe): before new SimJSON

jsp->sPath: Actions.Exec.Command
jsp->sVal: C:\Program Files (x86)\UnHackMe\hackmon.exe

jsp->sPath: Actions.Exec.Arguments
jsp->sVal: $(Arg0)

jsp->sPath: Settings.Enabled
jsp->sVal: true

jsp->sPath: RegistrationInfo.Description
jsp->sVal: Part of RegRun Suite/UnHackMe software. http://www.greatis.com