Technical Information
- %WINDIR%\Tasks\globalUpdateUpdateTaskMachineUA.job
- %WINDIR%\Tasks\fb6b758b-841b-48a1-9306-e7d79fedf791-1.job
- %WINDIR%\Tasks\globalUpdateUpdateTaskMachineCore.job
- %WINDIR%\Tasks\fb6b758b-841b-48a1-9306-e7d79fedf791-11.job
- %WINDIR%\Tasks\fb6b758b-841b-48a1-9306-e7d79fedf791-4.job
- [<HKLM>\SYSTEM\ControlSet001\Services\globalUpdate] 'Start' = '00000002'
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /handoff "appguid={06f9c542-63ca-47a4-a81f-3b5e3594d3a6}&appname=3ad1869d-5a83-490c-a41d-3e42dbc8bbd5&needsadmin=True&lang=en" /installsource otherinstallcmd /sessionid "{EF9F4DF4-246B-4B84-A13C-63CFB6D02AF3}" /silent
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB2ZXJzaW9uPSIxLjMuMjUuMCIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntFRjlGNERGNC0yNDZCLTRCODQtQTEzQy02M0NGQjZEMDJBRjN9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHRlc3Rzb3VyY2U9ImF1dG8iIHJlcXVlc3RpZD0iezg3QkYzRkFCLTdCNzQtNDI2NC05RjA0LTIxOEVDNkM0NDY3Rn0iPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSI1LjEiIHNwPSJTZXJ2aWNlIFBhY2sgMiIgYXJjaD0ieDg2Ii8-PGFwcCBhcHBpZD0iezQzMEZENEQwLUI3MjktNEY2MS1BQTM0LTkxNTI2NDgxNzk5RH0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IjEuMy4yNS4wIiBsYW5nPSJlbiIgYnJhbmQ9IiIgY2xpZW50PSIiPjxldmVudCBldmVudHR5cGU9IjIiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48L2FwcD48L3JlcXVlc3Q-
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB2ZXJzaW9uPSIxLjMuMjUuMCIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9IntFRjlGNERGNC0yNDZCLTRCODQtQTEzQy02M0NGQjZEMDJBRjN9IiBpbnN0YWxsc291cmNlPSJvdGhlcmluc3RhbGxjbWQiIHRlc3Rzb3VyY2U9ImF1dG8iIHJlcXVlc3RpZD0iezA1ODU4NTdBLTY1RDMtNDI0My1BRkEzLTlDMjQ2RDQ3NUM4OH0iPjxvcyBwbGF0Zm9ybT0id2luIiB2ZXJzaW9uPSI1LjEiIHNwPSJTZXJ2aWNlIFBhY2sgMiIgYXJjaD0ieDg2Ii8-PGFwcCBhcHBpZD0iezA2RjlDNTQyLTYzQ0EtNDdBNC1BODFGLTNCNUUzNTk0RDNBNn0iIHZlcnNpb249IiIgbmV4dHZlcnNpb249IiIgbGFuZz0iZW4iIGJyYW5kPSIiIGNsaWVudD0iIj48ZXZlbnQgZXZlbnR0eXBlPSIyIiBldmVudHJlc3VsdD0iMCIgZXJyb3Jjb2RlPSItMTA3Mjg5Njc2MCIgZXh0cmFjb2RlMT0iMjY4NDM1NDU5Ii8-PC9hcHA-PC9yZXF1ZXN0Pg==
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /svc
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /regserver
- '%PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-11.exe' /hmYmWNl=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
- '%TEMP%\comh.267160\GoogleUpdate.exe' /silent /install "appguid={06f9c542-63ca-47a4-a81f-3b5e3594d3a6}&appname=3ad1869d-5a83-490c-a41d-3e42dbc8bbd5&needsadmin=True&lang=en"
- '%PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-4.exe' /jGyMJAs /nzPJIem='Sense' /uCtiSoaI='%PROGRAM_FILES%\Sense\48292.xpi' /itUWgT=48292 /VfHcxapr='000803' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=52FA86CBEAF249E6899376F05416FBDBIE /DCRtzJ=f5f78e67b5196f31f6aacd1268d05242 /wjfHyHPNF=1_34_06_10 /SEmIo=1.34.6.10 /foiMlS=1423086721 /PJNQjyLJg=http://st###.#emoclientnet.com /fnbiQL=http://er####.#emoclientnet.com /nxVhIjzhZ=300 /XmwDk=143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com /xcTqLwrg=0.94 /NnIKhkrdw=a143f44cfd99c4e458cd9ef929de77aa8bdbf60380097480c8d8efc48e28131a8com48292 /VHKqh=https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/48292.rdf /HuQgrC='Sense' /tNLfbA='.' /dNUyd='Object Browser' /XaeuuA=ie /EtPJKWSsm='{"asw":[0, 0, 0]}' /szWufRqQB /YGSVnu /uivRrMU /TPEnPxnq='http://up####.#emoclientnet.com/ff_agent_updates/{CAMP_ID}/update.json' /qjLEfu /nneDSQYp='installer' /fXyNs='%TEMP%\SenseInstaller_1423086721.log'
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /regsvc
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\Sense\Sense-bho.dll"
- '<SYSTEM32>\msiexec.exe' /V
- opera.exe
- firefox.exe
- iexplore.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\update.css
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\popup.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon48.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button2.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon24.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\skin.css
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button5.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\ff49b27f099ff378f61d2333243a052e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\608ddd18ac621eeb4a915fbc0552ded3.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\78378596565ef5280f5689a8f1225492.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\c44ee03f6c89bfc25a7281cdddb450c2.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\40a4a79548895d081fbb25cbe344d3f4.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\24a4eef16f26ae682dc3b56b87275519.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e6fef82bf244d3c0c6cd3ff0dd4a87e2.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button3.png
- C:\Config.Msi\3039e.rbs
- %WINDIR%\Installer\MSIA.tmp
- %WINDIR%\Installer\3039b.msi
- %TEMP%\MSI30f72.LOG
- %TEMP%\nss3.tmp\extensionData\plugins\1.js
- %TEMP%\nss3.tmp\extensionData\plugins.json
- %TEMP%\nss3.tmp\extensionData\manifest.xml
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\panelarrow-up.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon16.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button1.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon128.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button4.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\crossrider_statusbar.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e711f38d926a08da0cd56889df4dd742.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\a47e4da7663026c369855040f017aa56.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\8eea7bf2b125df8f6093181e46955ddf.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\9c07c106944f7a9f4cc0c317c6904b4d.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\08e21964209d21f2f710a2ce8dcc81d7.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\4ad84a9e8f2f9947b6a0cfe5d3f3537f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\da0dfb63f8fbae3941d49df18a691964.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\f5f14bf522d4329297a39d81dd2b4694.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\250bf8147714212c9fdb8b47e2e8b3e8.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\3f84ce211321f3c08b595e893a2172bc.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\1578654100ce272e5d479a4c109c1e76.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\56f2996b37f0e90d5d1aee7a386cbcd5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\381f8681d2c49626a2f18270fdf4ba44.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\05d46928ce7a3c62c0b52d20222b795e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\b097d46a8bb527a37a8919592fb2909f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\9b80503a0f4ffd4ad75b15146a7c9c2e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\4c3d3179a06d9a1b79ea235cbc7593d5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e3e925aae1753c86fd184fadfe730aa8.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\5f95e8227c147c9d1c65bbe0a4ee4261.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\ca2f39b8cce92d963f518ba68cbf7048.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\55b62a4e42d0618d526c942a464b2f84.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\939c55069e181dfba256d7b90d004d7f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\cd33b69b56973c6070cfbd9ba731d3c5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\368eca2fb0488f159fae4ff320ef2829.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\installer.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\b60f6439c7c07a3c6f6862d9e24b4bab.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\23032d1b3a683f881772ea7221d0c4a5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\4eeefd60e18b99a8c0abb609d3b6b45f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\581c736a032a6c6e5e40fb6d33eeebe5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\bc5d1cac54d1d93cb6d9fb3780c44e31.js
- %TEMP%\nss3.tmp\extensionData\plugins\4.js
- %TEMP%\nss3.tmp\extensionData\plugins\39.js
- %TEMP%\nss3.tmp\extensionData\plugins\38.js
- %TEMP%\nss3.tmp\extensionData\plugins\40.js
- %TEMP%\nss3.tmp\extensionData\plugins\43.js
- %TEMP%\nss3.tmp\extensionData\plugins\42.js
- %TEMP%\nss3.tmp\extensionData\plugins\41.js
- %TEMP%\nss3.tmp\extensionData\plugins\28.js
- %TEMP%\nss3.tmp\extensionData\plugins\269.js
- %TEMP%\nss3.tmp\extensionData\plugins\263.js
- %TEMP%\nss3.tmp\extensionData\plugins\3.js
- %TEMP%\nss3.tmp\extensionData\plugins\37.js
- %TEMP%\nss3.tmp\extensionData\plugins\36.js
- %TEMP%\nss3.tmp\extensionData\plugins\35.js
- %TEMP%\nss3.tmp\extensionData\plugins\44.js
- %TEMP%\nss3.tmp\extensionData\plugins\93.js
- %TEMP%\nss3.tmp\extensionData\plugins\91.js
- %TEMP%\nss3.tmp\extensionData\plugins\9.js
- %TEMP%\nss3.tmp\extensionData\plugins\94.js
- %PROGRAM_FILES%\Sense\Sense-bho.dll
- %TEMP%\nss3.tmp\extensionData\userCode\extension.js
- %TEMP%\nss3.tmp\extensionData\userCode\background.js
- %TEMP%\nss3.tmp\extensionData\plugins\47.js
- %TEMP%\nss3.tmp\extensionData\plugins\46.js
- %TEMP%\nss3.tmp\extensionData\plugins\45.js
- %TEMP%\nss3.tmp\extensionData\plugins\64.js
- %TEMP%\nss3.tmp\extensionData\plugins\78.js
- %TEMP%\nss3.tmp\extensionData\plugins\72.js
- %TEMP%\nss3.tmp\extensionData\plugins\7.js
- %TEMP%\nss3.tmp\extensionData\plugins\246.js
- %TEMP%\nss3.tmp\extensionData\plugins\182.js
- %TEMP%\nss3.tmp\extensionData\plugins\180.js
- %TEMP%\nss3.tmp\extensionData\plugins\177.js
- %TEMP%\nss3.tmp\extensionData\plugins\183.js
- %TEMP%\nss3.tmp\extensionData\plugins\192.js
- %TEMP%\nss3.tmp\extensionData\plugins\191.js
- %TEMP%\nss3.tmp\extensionData\plugins\184.js
- %TEMP%\nss3.tmp\extensionData\plugins\123.js
- %TEMP%\nss3.tmp\extensionData\plugins\104.js
- %TEMP%\nss3.tmp\extensionData\plugins\102.js
- %TEMP%\nss3.tmp\extensionData\plugins\13.js
- %TEMP%\nss3.tmp\extensionData\plugins\17.js
- %TEMP%\nss3.tmp\extensionData\plugins\155.js
- %TEMP%\nss3.tmp\extensionData\plugins\14.js
- %TEMP%\nss3.tmp\extensionData\plugins\193.js
- %TEMP%\nss3.tmp\extensionData\plugins\230.js
- %TEMP%\nss3.tmp\extensionData\plugins\226.js
- %TEMP%\nss3.tmp\extensionData\plugins\223.js
- %TEMP%\nss3.tmp\extensionData\plugins\233.js
- %TEMP%\nss3.tmp\extensionData\plugins\244.js
- %TEMP%\nss3.tmp\extensionData\plugins\242.js
- %TEMP%\nss3.tmp\extensionData\plugins\239.js
- %TEMP%\nss3.tmp\extensionData\plugins\207.js
- %TEMP%\nss3.tmp\extensionData\plugins\2.js
- %TEMP%\nss3.tmp\extensionData\plugins\195.js
- %TEMP%\nss3.tmp\extensionData\plugins\21.js
- %TEMP%\nss3.tmp\extensionData\plugins\220.js
- %TEMP%\nss3.tmp\extensionData\plugins\22.js
- %TEMP%\nss3.tmp\extensionData\plugins\211.js
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\8BD11C4A2318EC8E5A82462092971DEA
- %TEMP%\nss3.tmp\ExecDos.dll
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-11.exe
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\8BD11C4A2318EC8E5A82462092971DEA
- %TEMP%\Cab8.tmp
- %TEMP%\Cab6.tmp
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
- %PROGRAM_FILES%\Sense\360-48292.crx
- %TEMP%\Cab4.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\C3E814D1CB223AFCD58214D14C3B7EAB
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\C3E814D1CB223AFCD58214D14C3B7EAB
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791.crx
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\goopdateres_en.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\install.rdf
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-4.exe
- %PROGRAM_FILES%\Sense\48292.xpi
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\locale\en-US\translations.dtd
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins.json
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome.manifest
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\defaults\preferences\prefs.js
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\psmachine.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\psuser.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi
- %PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
- %TEMP%\nss3.tmp\update.json
- %TEMP%\nss3.tmp\inetc.dll
- %TEMP%\nss3.tmp\UserInfo.dll
- %TEMP%\nss3.tmp\186101
- %TEMP%\nss3.tmp\298178
- %PROGRAM_FILES%\Sense\utils.exe
- %TEMP%\nss3.tmp\System.dll
- %TEMP%\nss3.tmp\StdUtils.dll
- %TEMP%\nsh2.tmp
- %TEMP%\nss3.tmp\InstallerUtils.dll
- %TEMP%\nss3.tmp\md5dll.dll
- %TEMP%\nss3.tmp\nsisos.dll
- %TEMP%\nss3.tmp\InstallerUtils2.dll
- %PROGRAM_FILES%\Sense\Uninstall.exe
- %TEMP%\comh.267160\psuser.dll
- %TEMP%\comh.267160\psmachine.dll
- %TEMP%\comh.267160\npGoogleUpdate4.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
- %PROGRAM_FILES%\Sense\1293297481.mxaddon
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\goopdate.dll
- %TEMP%\comh.267160\GoogleUpdateBroker.exe
- %TEMP%\comh.267160\GoogleUpdate.exe
- %TEMP%\comh.267160\GoogleCrashHandler.exe
- %TEMP%\comh.267160\GoogleUpdateHelper.msi
- %TEMP%\comh.267160\goopdateres_en.dll
- %TEMP%\comh.267160\goopdate.dll
- %TEMP%\comh.267160\GoogleUpdateOnDemand.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\78.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\102.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\193.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\17.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\98.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\13.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\47.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\223.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\64.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\220.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\191.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\239.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\184.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\72.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\207.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\02d6d1167990731d2f436ca29de87b6d.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\89f97acd351f5e2f3107a15badfaa995.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\search_dialog.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\a9114e43b11b7a5351b5a253d9ccb2c1.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\8507b5a7d6859831b7d0fc8e625f7527.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\browser.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\options.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\options.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\userCode\background.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\userCode\extension.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\a8b424cacf3b40e0507e5935553ecdbf.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\ffCoreFilesIndex.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\background.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\dialog.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\246.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\123.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\211.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\155.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\244.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\16.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\93.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\230.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\180.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\183.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\manifest.xml
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\28.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\192.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\226.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\268.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\91.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\14.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\104.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\9.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\177.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\22.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\263.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\233.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\21.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\4.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\242.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\7.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\182.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\195.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\1.js
- C:\Config.Msi\3039e.rbs
- %WINDIR%\Installer\MSIA.tmp
- %WINDIR%\Installer\3039d.ipi
- %WINDIR%\Installer\3039b.msi
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %TEMP%\Cab4.tmp
- %TEMP%\nss3.tmp\186101
- %TEMP%\Cab8.tmp
- %TEMP%\Cab6.tmp
- 'ts####.ws.symantec.com':80
- 'cr#.#hawte.com':80
- 'localhost':1046
- 'localhost':1051
- 'localhost':1048
- 'er####.#emoclientnet.com':80
- 'up####.#emoclientnet.com':80
- 'st###.#emoclientnet.com':80
- 'www.download.windowsupdate.com':80
- 'lo##.##moclientnet.com':80
- up####.#emoclientnet.com/omaha/06F9C542-63CA-47A4-A81F-3B5E3594D3A6/1/update.xml?ra########################################################################################################################################################################################
- up####.#emoclientnet.com/omaha/430FD4D0-B729-4F61-AA34-91526481799D/1/ping.xml?ra########
- ts####.ws.symantec.com/tss-ca-g2.crl
- up####.#emoclientnet.com/omaha/06F9C542-63CA-47A4-A81F-3B5E3594D3A6/1/update.xml?ra########
- up####.#emoclientnet.com/omaha/06F9C542-63CA-47A4-A81F-3B5E3594D3A6/1/ping.xml?ra#####
- up####.#emoclientnet.com/omaha/06F9C542-63CA-47A4-A81F-3B5E3594D3A6/1/ping.xml?ra########
- lo##.##moclientnet.com/monetization.gif?ra######################################################################################################################################################################
- st###.#emoclientnet.com/installer.gif?ac####################################################################################################################################################################################################################################################################################################################################################################################################################################
- er####.#emoclientnet.com/installer-error.gif?ac#######################################################################################################################################################################################################################################################################################################################################################################################################
- up####.#emoclientnet.com/installer_updates/000803/update.json
- lo##.##moclientnet.com/monetization.gif?ev#############################################################################################################################################################################################################################################################################################################################################################################
- cr#.#hawte.com/ThawteTimestampingCA.crl
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
- DNS ASK www.download.windowsupdate.com
- DNS ASK cr#.#hawte.com
- DNS ASK ts####.ws.symantec.com
- DNS ASK lo##.##moclientnet.com
- DNS ASK up####.#emoclientnet.com
- DNS ASK er####.#emoclientnet.com
- DNS ASK st###.#emoclientnet.com
- ClassName: 'Shell_TrayWnd' WindowName: ''