Technical Information
- '%TEMP%\RarSFX0\App\msnmsgr.exe'
- '%WINDIR%\regedit.exe' /s Registro.reg
- '%TEMP%\RarSFX0\Iniciar.exe'
- [<HKLM>\Software\Microsoft\MSNMessenger]
- [<HKCU>\Software\Microsoft\MSNMessenger]
- %TEMP%\RarSFX0\Registro2.reg
- %TEMP%\RarSFX0\App\highcont.thm
- %TEMP%\RarSFX0\App\msgrvsta.thm
- %TEMP%\RarSFX0\App\Device Manager\WLPhoneCV.cat
- %TEMP%\RarSFX0\App\ctticon.ico
- %TEMP%\RarSFX0\Registro.reg
- %TEMP%\RarSFX0\App\online.wma
- %TEMP%\RarSFX0\App\outgoing.wma
- %TEMP%\RarSFX0\App\phone.wma
- %TEMP%\RarSFX0\App\newalert.wma
- %TEMP%\RarSFX0\App\newemail.wma
- %TEMP%\RarSFX0\App\nudge.wma
- %TEMP%\RarSFX0\App\psmsong.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\RTMPLTFM.dll
- %TEMP%\RarSFX0\sirenacm.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\9\msndevmanres.dll
- %TEMP%\RarSFX0\App\msvsui.dll
- %TEMP%\RarSFX0\App\pcsexeps.dll
- %TEMP%\RarSFX0\App\usnsvcps.dll
- %TEMP%\RarSFX0\App\wmp8stub.dll
- %TEMP%\RarSFX0\App\wmv9vcm.dll
- %TEMP%\RarSFX0\App\softphone.dll
- %TEMP%\RarSFX0\App\softphoneps.dll
- %TEMP%\RarSFX0\App\softphoneres.dll
- %TEMP%\RGI8.tmp
- %TEMP%\RGI9.tmp
- %TEMP%\RGIA.tmp
- %TEMP%\RGI5.tmp
- %TEMP%\RGI6.tmp
- %TEMP%\RGI7.tmp
- %TEMP%\RGIE.tmp
- %TEMP%\RGIF.tmp
- %TEMP%\RGI10.tmp
- %TEMP%\RGIB.tmp
- %TEMP%\RGIC.tmp
- %TEMP%\RGID.tmp
- %TEMP%\RarSFX0\App\msvsConfig2.xml
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
- %TEMP%\RarSFX0\App\type.wma
- %TEMP%\RarSFX0\App\vimdone.wma
- %TEMP%\RarSFX0\App\ErrorResponse.xml
- %TEMP%\RGI2.tmp
- %TEMP%\RGI3.tmp
- %TEMP%\RGI4.tmp
- %APPDATA%\Microsoft\Protect\CREDHIST
- %APPDATA%\Microsoft\IdentityCRL\Production\ppcrlconfig.dll
- %TEMP%\RGI1.tmp
- %TEMP%\RarSFX0\App\dfsr.dll
- %TEMP%\RarSFX0\App\fsshext.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\htc.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\contactsUX.dll
- %TEMP%\RarSFX0\App\Device Manager\custom.dll
- %TEMP%\RarSFX0\App\custsat.dll
- %TEMP%\RarSFX0\App\MessengerClient.dll
- %TEMP%\RarSFX0\App\msgrapp.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\msgsc.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\lcapi.dll
- %TEMP%\RarSFX0\App\lcres.dll
- %TEMP%\RarSFX0\App\lmcdata.dll
- %TEMP%\RarSFX0\App\Device Manager\dpinst64.exe
- %TEMP%\RarSFX0\Iniciar.exe
- %TEMP%\RarSFX0\App\livecall.exe
- %TEMP%\RarSFX0\App\license.rtf
- %TEMP%\RarSFX0\App\Device Manager\WLPhoneCV.inf
- %TEMP%\RarSFX0\App\Device Manager\dpinst.exe
- %TEMP%\RarSFX0\App\usnsvc.exe
- %TEMP%\RarSFX0\App\abssm.dll
- %TEMP%\RarSFX0\App\contact.dll
- %TEMP%\RarSFX0\App\Device Manager\msgrdvmn.exe
- %TEMP%\RarSFX0\App\msnmsgr.exe
- %TEMP%\RarSFX0\App\msvs.exe
- %TEMP%\RarSFX0\App\Device Manager\Loc\20\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\22\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\25\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\17\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\18\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\19\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\6\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\7\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\8\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\29\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\31\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\4\msndevmanres.dll
- %TEMP%\RarSFX0\App\msidcrl40.dll
- %TEMP%\RarSFX0\App\msimg32.dll
- %TEMP%\RarSFX0\App\msncore.dll
- %TEMP%\RarSFX0\App\msgslang.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\msgsres.dll
- %TEMP%\RarSFX0\App\msgswcam.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\11\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\12\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\16\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\10\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\1028\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\1046\msndevmanres.dll
- %TEMP%\RarSFX0\App\psmsong.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\RTMPLTFM.dll
- %TEMP%\RarSFX0\App\msvsui.dll
- %TEMP%\RarSFX0\App\pcsexeps.dll
- %TEMP%\RarSFX0\sirenacm.dll
- %TEMP%\RarSFX0\App\softphoneres.dll
- %TEMP%\RarSFX0\App\usnsvcps.dll
- %TEMP%\RarSFX0\App\softphone.dll
- %TEMP%\RarSFX0\App\softphoneps.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\29\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\31\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\22\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\25\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\4\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\8\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\9\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\6\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\7\msndevmanres.dll
- %TEMP%\RarSFX0\App\online.wma
- %TEMP%\RarSFX0\App\outgoing.wma
- %TEMP%\RarSFX0\App\newemail.wma
- %TEMP%\RarSFX0\App\nudge.wma
- %TEMP%\RarSFX0\App\phone.wma
- %TEMP%\RarSFX0\App\ErrorResponse.xml
- %TEMP%\RarSFX0\App\msvsConfig2.xml
- %TEMP%\RarSFX0\App\type.wma
- %TEMP%\RarSFX0\App\vimdone.wma
- %TEMP%\RarSFX0\App\Device Manager\WLPhoneCV.cat
- %TEMP%\RarSFX0\App\ctticon.ico
- %TEMP%\RarSFX0\App\wmp8stub.dll
- %TEMP%\RarSFX0\App\wmv9vcm.dll
- %TEMP%\RarSFX0\Registro.reg
- %TEMP%\RarSFX0\App\msgrvsta.thm
- %TEMP%\RarSFX0\App\newalert.wma
- %TEMP%\RarSFX0\Registro2.reg
- %TEMP%\RarSFX0\App\highcont.thm
- %TEMP%\RarSFX0\App\Device Manager\Loc\20\msndevmanres.dll
- %TEMP%\RarSFX0\App\contactsUX.dll
- %TEMP%\RarSFX0\App\Device Manager\custom.dll
- %TEMP%\RarSFX0\App\abssm.dll
- %TEMP%\RarSFX0\App\contact.dll
- %TEMP%\RarSFX0\App\custsat.dll
- %TEMP%\RarSFX0\App\htc.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\lcapi.dll
- %TEMP%\RarSFX0\App\dfsr.dll
- %TEMP%\RarSFX0\App\fsshext.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\Device Manager\dpinst.exe
- %TEMP%\RarSFX0\App\Device Manager\dpinst64.exe
- %TEMP%\RarSFX0\App\license.rtf
- %TEMP%\RarSFX0\App\Device Manager\WLPhoneCV.inf
- %TEMP%\RarSFX0\App\livecall.exe
- %TEMP%\RarSFX0\App\msvs.exe
- %TEMP%\RarSFX0\App\usnsvc.exe
- %TEMP%\RarSFX0\App\Device Manager\msgrdvmn.exe
- %TEMP%\RarSFX0\App\msnmsgr.exe
- %TEMP%\RarSFX0\App\Device Manager\Loc\1046\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\11\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\10\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\1028\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\12\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\18\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\19\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\16\msndevmanres.dll
- %TEMP%\RarSFX0\App\Device Manager\Loc\17\msndevmanres.dll
- %TEMP%\RarSFX0\App\MessengerClient.dll
- %TEMP%\RarSFX0\App\msgrapp.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\lcres.dll
- %TEMP%\RarSFX0\App\lmcdata.dll
- %TEMP%\RarSFX0\App\msgsc.8.1.0178.00.dll
- %TEMP%\RarSFX0\App\msimg32.dll
- %TEMP%\RarSFX0\App\msncore.dll
- %TEMP%\RarSFX0\App\msgswcam.dll
- %TEMP%\RarSFX0\App\msidcrl40.dll
- %TEMP%\RGIB.tmp
- %TEMP%\RGIC.tmp
- %TEMP%\RGI9.tmp
- %TEMP%\RGIA.tmp
- %TEMP%\RGIF.tmp
- %TEMP%\RGI10.tmp
- %TEMP%\RGID.tmp
- %TEMP%\RGIE.tmp
- %TEMP%\RGI8.tmp
- %TEMP%\RGI2.tmp
- %TEMP%\RGI3.tmp
- %APPDATA%\Microsoft\IdentityCRL\Production\ppcrlconfig.dll
- %TEMP%\RGI1.tmp
- %TEMP%\RGI6.tmp
- %TEMP%\RGI7.tmp
- %TEMP%\RGI4.tmp
- %TEMP%\RGI5.tmp
- 'cl######nfig.passport.net':80
- '20#.#6.232.182':80
- 'wp#d':80
- http://cl######nfig.passport.net/ppcrlconfig.bin
- http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl via 20#.#6.232.182
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK cl######nfig.passport.net
- DNS ASK crl.microsoft.com
- DNS ASK wp#d
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''