Technical Information
To ensure autorun and distribution:
Creates the following services:
- [<HKLM>\SYSTEM\ControlSet001\Services\sogr] 'Start' = '00000002'
Malicious functions:
Creates and executes the following:
- '%PROGRAM_FILES%\Speed Optimizer Guru\SpeedOptimizerGuru.exe' true
- '%PROGRAM_FILES%\Speed Optimizer Guru\InstAct.exe' install
- '%PROGRAM_FILES%\Speed Optimizer Guru\InstAct.exe' installurl
- '%WINDIR%\Microsoft\sogr\WindowsUpdater.exe'
- '%TEMP%\MsiToExe.SpeedOptimizerGuruSetup.exe'
- '%PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\privoxy.exe'
Executes the following:
- '<SYSTEM32>\msiexec.exe' /i "%APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\SpeedOptimizerGuru.msi" /qn AI_SETUPEXEPATH=%TEMP%\MsiToExe.SpeedOptimizerGuruSetup.exe SETUPEXEDIR=%TEMP%\ EXE_CMD_LINE="/exenoupdates /exelang 0 /noprereqs "
- '<SYSTEM32>\msiexec.exe' -Embedding 5C8147F5B6AD27D957AD03F320E933DF
- '<SYSTEM32>\msiexec.exe' -Embedding 7125AD2EB4A8F1AA7C6DF3A3545E2756 M Global\MSI0000
- '<SYSTEM32>\msiexec.exe' -Embedding 9117710E179FE83C439663B6470F1BC7 M Global\MSI0000
- '<SYSTEM32>\msiexec.exe' /i "%TEMP%\MsiToExe.SetupExtension.msi" /q
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' -Embedding C1C452BB293186D9DF1512DE38A087DB
Terminates or attempts to terminate
the following user processes:
- chrome.exe
Modifies settings of Windows Internet Explorer:
- [\REGISTRY\USER\S-1-5-20_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [\REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
- [\REGISTRY\USER\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKCU>_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
- [<HKCU>_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [\REGISTRY\USER\S-1-5-20_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
- [\REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [\REGISTRY\USER\S-1-5-19_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
- [\REGISTRY\USER\S-1-5-19_CLASSES\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [\REGISTRY\USER\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyServer' = 'http=127.0.0.1:8118;https=127.0.0.1:8118'
Modifies file system :
Creates the following files:
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\fr\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\fil-PH\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\es\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\he\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\ja\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\it\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\hr-HR\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\de\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\tr-TR\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\th-TH\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sv\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\ar\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\da\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\bs-Latn-BA\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\bs-Cyrl-BA\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\updater.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Uninst000.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Uninst000.CA.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Uninst000.CA.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\ComponentFactory.Krypton.Toolkit.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\bo.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\InstAct.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\tr-TR\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\se-FI\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\no\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\nl\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sr-Cyrl-RS\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\th-TH\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sv\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sr-Latn-RS\Splash.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Microsoft.Deployment.WindowsInstaller.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Logging.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Interop.Shell32.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Microsoft.Win32.TaskScheduler.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\bs-Cyrl-BA\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\ar\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Setup.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Helper.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\SpeedOptimizerGuru.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\InstAct.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Microsoft.Win32.TaskScheduler.xml
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Splash.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\ComponentFactory.Krypton.Toolkit.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\bo.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\updater.exe
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\nl\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\ja\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\it\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\no\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sr-Latn-RS\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\sr-Cyrl-RS\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\se-FI\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\hr-HR\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\de\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\da\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\bs-Latn-BA\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\es\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\he\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\fr\SpeedOptimizerGuru.resources.dll
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\fil-PH\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\it\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\hr-HR\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\he\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\ja\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\se-FI\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\no\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\nl\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\fr\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\bs-Latn-BA\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\bs-Cyrl-BA\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\ar\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\da\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\fil-PH\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\es\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\de\SpeedOptimizerGuru.resources.dll
- %WINDIR%\Installer\{5B1BCD57-1E58-4E0D-8EEA-253DC9E38873}\SystemFoldermsiexec.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\updater.ini
- %ALLUSERSPROFILE%\Start Menu\Programs\Speed Optimizer Guru\Uninstall.lnk
- %WINDIR%\Installer\{5B1BCD57-1E58-4E0D-8EEA-253DC9E38873}\SpeedOptimizerGuruICON.exe
- <LS_APPDATA>\Speed_Optimizer_Guru\SpeedOptimizerGuru.exe_Url_wea1ziwwei1utikx1fumuo2p03jioaoy\2.5.6.0\veqaeov3.newcfg
- %HOMEPATH%\My Documents\SpeedOptimizerGuru\logerror.txt
- %WINDIR%\Installer\MSI12.tmp
- %ALLUSERSPROFILE%\Desktop\Speed Optimizer Guru.lnk
- %PROGRAM_FILES%\Speed Optimizer Guru\sr-Latn-RS\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\sr-Cyrl-RS\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\SpeedOptimizerGuru.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\sv\SpeedOptimizerGuru.resources.dll
- %ALLUSERSPROFILE%\Start Menu\Programs\Speed Optimizer Guru\Speed Optimizer Guru.lnk
- %PROGRAM_FILES%\Speed Optimizer Guru\tr-TR\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\th-TH\SpeedOptimizerGuru.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\bs-Latn-BA\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\bs-Cyrl-BA\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\ar\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\da\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\fil-PH\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\es\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\de\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Uninst000.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Microsoft.Deployment.WindowsInstaller.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Logging.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Helper.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Microsoft.Deployment.WindowsInstaller.xml
- %PROGRAM_FILES%\Speed Optimizer Guru\Setup.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Microsoft.Win32.TaskScheduler.xml
- %PROGRAM_FILES%\Speed Optimizer Guru\Microsoft.Win32.TaskScheduler.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\sr-Cyrl-RS\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Splash.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\se-FI\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\sr-Latn-RS\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\tr-TR\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\th-TH\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\sv\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\no\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\hr-HR\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\he\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\fr\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\Interop.Shell32.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\nl\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\ja\Splash.resources.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\it\Splash.resources.dll
- %WINDIR%\Microsoft\sogr\WindowsUpdater.exe
- %WINDIR%\Microsoft\sogr\Newtonsoft.Json.dll
- %WINDIR%\Microsoft\sogr\SQLite.Interop.dll
- %TEMP%\MsiToExe.SpeedOptimizerGuruSetup.exe
- %WINDIR%\Installer\2e55a.msi
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\SpeedOptimizerGuru.msi
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\decoder.dll
- %WINDIR%\Microsoft\sogr\System.Data.SQLite.dll
- %WINDIR%\Microsoft\sogr\win32.reg
- %WINDIR%\Installer\MSI7.tmp
- %WINDIR%\Installer\{AEB719FD-EDB0-43E9-B524-90F97C1E6499}\_853F67D554F05449430E7E.exe
- %WINDIR%\Microsoft\sogr\Installer.dll
- %WINDIR%\Microsoft\sogr\BaseLibrary.dll
- %WINDIR%\Microsoft\sogr\ConfigurationData.dll
- %WINDIR%\Microsoft\sogr\InstallerLibrary.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\configuration.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\webserver-update.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\testing.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\contact.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\index.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\general.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\copyright.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\newrelease.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\coding.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\config.txt
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\AUTHORS.txt
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\cvs.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\introduction.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\index.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\developer-manual\documentation.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\Installer.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\InstallFirefoxExtension.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\System.Data.SQLite.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\backup\uninstall.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\InstallerLibrary.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\SQLite.Interop.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\WindowsUpdater.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\BaseLibrary.dll
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\2e555.msi
- %TEMP%\MsiToExe.SetupExtension.msi
- %TEMP%\CFG2.tmp
- C:\Config.Msi\2e558.rbs
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\wsystem.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\NewVersionDownloader.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\ConfigurationData.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\backup\BaseLibrary.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\InstallFirefoxExtension.InstallState
- %WINDIR%\Installer\MSI6.tmp
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\backup\ConfigurationData.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\PPC Logo.ico
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\Newtonsoft.Json.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\backup\InstallerLibrary.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\PPC Logo.png
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\NewVersionDownloader.exe.config
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\win32.reg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\NDde.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Speed Optimizer Guru runtime\Interop.SHDocVw.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\user.action
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\trust.txt
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\url-info-osd.xml
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\user.filter
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\B69D763EB21649DA26F20618312DEE70
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\B69D763EB21649DA26F20618312DEE70
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\user.filter_old
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\no-such-domain
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\connect-failed
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\cgi-style.css
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\README.txt
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\mod-local-help
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\mod-unstable-warning
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\mod-title
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\templates\mod-support-and-service
- %WINDIR%\Installer\MSI10.tmp
- C:\Config.Msi\2e55d.rbs
- %WINDIR%\Installer\MSIE.tmp
- %TEMP%\{72843DC9-3D39-40CA-B94B-EE04EC218ACC}.bat
- %APPDATA%\Speed Optimizer Guru\Speed Optimizer Guru 2.5.6\install\9E38873\Microsoft.Deployment.WindowsInstaller.xml
- %WINDIR%\Installer\MSI11.tmp
- %TEMP%\AIBB_4032.tmp
- %TEMP%\AI_ResourceCleanerLog.txt
- %WINDIR%\Installer\MSI9.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\1F356F4D07FE8C483E769E4586569404
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\1F356F4D07FE8C483E769E4586569404
- %WINDIR%\Installer\MSIA.tmp
- %WINDIR%\Installer\MSID.tmp
- %WINDIR%\Installer\MSIC.tmp
- %WINDIR%\Installer\MSIB.tmp
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\contact.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\configuration.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\config.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\copyright.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\index.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\filter-file.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\files-in-use.jpg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\appendix.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\trouble.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\misc.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\faq\installation.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\images\files-in-use.jpg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\actions-file.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\p_doc.css
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\images\proxy_setup.jpg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\LICENSE.txt
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\whatsnew.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\templates.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\mgwz.dll
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\privoxy_uninstall.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\privoxy.log
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\privoxy.exe
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\startup.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\proxy2.jpg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\introduction.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\installation.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\proxy_setup.jpg
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\seealso.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\quickstart.html
- %PROGRAM_FILES%\Speed Optimizer Guru\runtime\Privoxy\doc\user-manual\p_doc.css
Deletes the following files:
- %WINDIR%\Installer\MSIE.tmp
- %WINDIR%\Installer\MSI10.tmp
- %WINDIR%\Installer\MSIB.tmp
- %WINDIR%\Installer\MSID.tmp
- %WINDIR%\Installer\MSI12.tmp
- C:\Config.Msi\2e55d.rbs
- %WINDIR%\Installer\MSI11.tmp
- %WINDIR%\Installer\MSIC.tmp
- %WINDIR%\Installer\MSIA.tmp
- %WINDIR%\Installer\MSI6.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI1.tmp
- %WINDIR%\Installer\MSI3.tmp
- %WINDIR%\Installer\2e555.msi
- %WINDIR%\Installer\MSI9.tmp
- %WINDIR%\Installer\MSI7.tmp
- C:\Config.Msi\2e558.rbs
Moves the following files:
- from <LS_APPDATA>\Speed_Optimizer_Guru\SpeedOptimizerGuru.exe_Url_wea1ziwwei1utikx1fumuo2p03jioaoy\2.5.6.0\veqaeov3.newcfg to <LS_APPDATA>\Speed_Optimizer_Guru\SpeedOptimizerGuru.exe_Url_wea1ziwwei1utikx1fumuo2p03jioaoy\2.5.6.0\user.config
Network activity:
Connects to:
- 'cr#.##modoca.com':80
- '14#.#10.147.77':80
- 'cr#.##ertrust.com':80
- 'tr###ate.info':80
- 'wp#d':80
TCP:
HTTP GET requests:
- cr#.##modoca.com/COMODOCodeSigningCA2.crl
- cr#.##ertrust.com/UTN-USERFirst-Object.crl
- wp#d/wpad.dat
HTTP POST requests:
- 14#.#10.147.77/callback/bo.php
UDP:
- DNS ASK cr#.##ertrust.com
- DNS ASK cr#.##modoca.com
- DNS ASK tr###ate.info
- DNS ASK wp#d
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'