Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'wextract_cleanup0' = 'rundll32.exe <SYSTEM32>\advpack.dll,DelNodeRunDLL32 "%TEMP%\IXP000.TMP\"'
- %TEMP%\IXP000.TMP\setup.cmd
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\ConfigShortcut.txt
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\WizardsShortcut.txt
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MUI\0407\mscorsecr.dll
- <SYSTEM32>\mui\0407\mscoreer.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\ShFusRes.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\mscorrc.dll
- %ProgramFiles%\Internet Explorer\MUI\0407\mscorier.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\aspnet_rc.dll
- %WINDIR%\assembly\tmp\ETS6C1KI\System.Web.Mobile.resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Web.Mobile.resources.dll
- %WINDIR%\Installer\27058.msi
- %WINDIR%\assembly\tmp\PNC6X3PF\RegCode.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\ConfigWizards.Resources.dll
- %WINDIR%\assembly\tmp\RLRYAUDZ\mscorcfg.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\mscorcfg.Resources.dll
- %WINDIR%\assembly\tmp\RZ7GZZG7\Mscorlib.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\repairRedist.htm
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\Regasm.resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\InstallUtil.resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\caspol.resources.dll
- %WINDIR%\assembly\tmp\6WOCJG61\System.Drawing.design.Resources.dll
- %WINDIR%\assembly\tmp\WZM8B8VA\System.Configuration.Install.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\RegCode.Resources.dll
- %WINDIR%\assembly\tmp\S56GXGK3\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\VY93BK2K\__AssemblyInfo__.ini
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1-Konfiguration.lnk
- %WINDIR%\assembly\tmp\2LUQOX0Y\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\O7YM7I49\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\6WOCJG61\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\WZM8B8VA\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\RZ7GZZG7\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\RLRYAUDZ\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\9VWN68XL\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\NC6XO67O\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\9JGSY5Q7\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\KIJ14AXM\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\VY93BK2K\System.Runtime.Serialization.Formatters.Soap.Resources.dll
- %WINDIR%\assembly\tmp\9W3NY074\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\4CZ4X9TY\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\9FTZK870\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\K2AL1JVQ\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\E0DNVBV0\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\V753RUJN\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\PNC6X3PF\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\ZEW79XU5\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\9LSNCWGM\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\V8NZJY1I\__AssemblyInfo__.ini
- %WINDIR%\assembly\tmp\SQPPH86Z\__AssemblyInfo__.ini
- %WINDIR%\Installer\{E78BFA60-5393-4C38-82AB-E8019E464EB4}\ndpsetup.ico
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\Microsoft .NET Framework 1.1-Assistenten.lnk
- %WINDIR%\assembly\tmp\2LUQOX0Y\System.runtime.remoting.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Web.Services.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Drawing.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Web.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\system.resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\mscorlib.resources.dll
- %WINDIR%\assembly\tmp\V8NZJY1I\Microsoft.VisualBasic.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\Microsoft.VisualBasic.resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\vbc7ui.dll
- %WINDIR%\assembly\tmp\SQPPH86Z\Microsoft.Jscript.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\JSC.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\Microsoft.JScript.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Messaging.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\cscompui.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\Vsavb7rtUI.dll
- C:\Config.Msi\27057.rbs
- %WINDIR%\Installer\MSI2.tmp
- %WINDIR%\Installer\27056.ipi
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\27054.msi
- %TEMP%\IXP000.TMP\langpack.msi
- %TEMP%\IXP000.TMP\langpac1.cab
- %TEMP%\IXP000.TMP\inst.exe
- %TEMP%\IXP000.TMP\setup.ini
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1031\alinkui.dll
- %WINDIR%\assembly\tmp\ZEW79XU5\System.EnterpriseServices.Resources.dll
- %WINDIR%\assembly\tmp\NC6XO67O\System.Messaging.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.xml.Resources.dll
- %WINDIR%\assembly\tmp\9VWN68XL\System.Resources.dll
- %WINDIR%\assembly\tmp\9JGSY5Q7\System.Drawing.Resources.dll
- %WINDIR%\assembly\tmp\KIJ14AXM\System.Design.Resources.dll
- %WINDIR%\assembly\tmp\9W3NY074\System.Data.Resources.dll
- %WINDIR%\assembly\tmp\S56GXGK3\System.xml.Resources.dll
- %WINDIR%\assembly\tmp\4CZ4X9TY\System.Windows.Forms.Resources.dll
- %WINDIR%\assembly\tmp\9FTZK870\System.Web.Services.Resources.dll
- %WINDIR%\assembly\tmp\K2AL1JVQ\System.Web.Resources.dll
- %WINDIR%\assembly\tmp\E0DNVBV0\System.ServiceProcess.Resources.dll
- %WINDIR%\assembly\tmp\V753RUJN\System.DirectoryServices.Resources.dll
- %WINDIR%\assembly\tmp\O7YM7I49\System.Management.Resources.dll
- %WINDIR%\assembly\tmp\9LSNCWGM\System.Security.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Management.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Drawing.Design.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Runtime.Serialization.Formatters.Soap.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Windows.Forms.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.EnterpriseServices.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Security.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Runtime.Remoting.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.ServiceProcess.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.DirectoryServices.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Design.Resources.dll
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\DE\System.Data.Resources.dll
- %WINDIR%\assembly\tmp\ETS6C1KI\__AssemblyInfo__.ini
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\MSI2.tmp
- C:\Config.Msi\27057.rbs
- %WINDIR%\Installer\27054.msi
- %WINDIR%\Installer\27056.ipi
- %TEMP%\IXP000.TMP\langpack.msi
- %TEMP%\IXP000.TMP\langpac1.cab
- %TEMP%\IXP000.TMP\inst.exe
- %TEMP%\IXP000.TMP\setup.ini
- %TEMP%\IXP000.TMP\setup.cmd
- '<SYSTEM32>\cmd.exe' /c %TEMP%\IXP000.TMP\setup.cmd
- '<SYSTEM32>\msiexec.exe' /i "%TEMP%\IXP000.TMP\langpack.msi" /quiet
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' -Embedding 24A071F4BAADDF151BDB0F98D9C9A799