Technical Information
- '%TEMP%\is-K6HJQ.tmp\DisplayFusionSetup-6.0c.tmp' /SL5="$10118,9754733,119296,%PROGRAM_FILES%\DisplayFusion Pro\DisplayFusionSetup-6.0c.exe"
- '%APPDATA%\Realtek\Audio\RtHDVCpl.exe'
- '%TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.exe' /m="<Full path to virus>" /k=""
- '%PROGRAM_FILES%\DisplayFusion Pro\DisplayFusionSetup-6.0c.exe'
- '%APPDATA%\Realtek\Audio\RtHDVCpl.exe' (downloaded from the Internet)
- '<SYSTEM32>\msiexec.exe' -Embedding DC865FE1876E24A4CF85A746F31881D4
- '<SYSTEM32>\msiexec.exe' /V
- %WINDIR%\Installer\MSI2.tmp
- %WINDIR%\Installer\33077.msi
- %WINDIR%\Installer\MSI5.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- %TEMP%\{62F6CD6C-F199-4793-886F-60E09AC49DC3}
- %TEMP%\mia1\mDownExec.dll
- %TEMP%\mia1\wizard.dfm
- %TEMP%\mia1\welcome.dfm
- %APPDATA%\Google\Update\updater.exe
- %TEMP%\mia1\DisplayFusionSetup-6.0c.msi
- %TEMP%\mia1\mMSIExec.dll
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\DisplayFusionSetup-6.0c.par
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\DisplayFusionSetup-6.0c.dat
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\mia.lib
- %APPDATA%\Realtek\Audio\RtHDVCpl.exe
- %TEMP%\is-K6HJQ.tmp\DisplayFusionSetup-6.0c.tmp
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\instance.dat
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\DisplayFusionSetup-6.0c.res
- %PROGRAM_FILES%\DisplayFusion Pro\DisplayFusionSetup-6.0c.exe
- C:\Config.Msi\3307a.rbs
- %WINDIR%\Installer\MSI6.tmp
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\DisplayFusionSetup-6.0c.msi
- %ALLUSERSPROFILE%\Application Data\{17B8ECD6-787D-4E09-A49C-87C49769AA8A}\DisplayFusionSetup-6.0c.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\DisplayFusion Pro\Uninstall DisplayFusion Pro.lnk
- %TEMP%\mia1\startmenu.dfm
- %TEMP%\lang.loc
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.res
- %TEMP%\mia1.tmp\mia.lib
- %TEMP%\mia1\componentstree.dfm
- %TEMP%\mia.tmp
- %TEMP%\mia1\installaware.png
- %TEMP%\mia1.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.exe
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.msi
- %TEMP%\mia1.tmp\data\DisplayFusionSetup-6.0c.msi
- %TEMP%\mia1.tmp\data\setup\mDown.dll\mDownExec.dll
- %TEMP%\mia1.tmp\data\OFFLINE\mDown.dll\mDownExec.dll
- %TEMP%\mia1.tmp\data\OFFLINE\788B120\EE329B84\DisplayFusionSetup-6.0c.exe
- %TEMP%\mia1\registration.dfm
- %TEMP%\mia1\readme.dfm
- %TEMP%\mia1\progressprereq.dfm
- %TEMP%\mia1\startinstallation.dfm
- %TEMP%\mia1\setuptype.dfm
- %TEMP%\mia1\registrationwithserial.dfm
- %TEMP%\mia1\progress.dfm
- %TEMP%\mia1\icon.ico
- %TEMP%\mia1\finish.dfm
- %TEMP%\mia1\destination.dfm
- %TEMP%\mia1\prereq.dfm
- %TEMP%\mia1\maintenance.dfm
- %TEMP%\mia1\licensecheck.dfm
- %TEMP%\mia1\setuptype.dfm
- %TEMP%\mia1\registrationwithserial.dfm.miaf
- %TEMP%\mia1\registrationwithserial.dfm
- %TEMP%\mia1\startmenu.dfm
- %TEMP%\mia1\startinstallation.dfm
- %TEMP%\mia1\setuptype.dfm.miaf
- %TEMP%\mia1\progressprereq.dfm
- %TEMP%\mia1\progress.dfm.miaf
- %TEMP%\mia1\progress.dfm
- %TEMP%\mia1\registration.dfm.miaf
- %TEMP%\mia1\registration.dfm
- %TEMP%\mia1\readme.dfm
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.exe
- %TEMP%\mia1.tmp\data\setup\mDown.dll\mDownExec.dll
- %TEMP%\mia1.tmp\data\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia1.tmp\mia.lib
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.res
- %TEMP%\mia1.tmp\DisplayFusionSetup-6.0c.msi
- %TEMP%\mia1\wizard.dfm
- %TEMP%\mia1\welcome.dfm
- %TEMP%\mia1\startmenu.dfm.miaf
- %TEMP%\mia1.tmp\data\OFFLINE\mDown.dll\mDownExec.dll
- %TEMP%\mia1.tmp\data\OFFLINE\788B120\EE329B84\DisplayFusionSetup-6.0c.exe
- %TEMP%\mia1.tmp\data\DisplayFusionSetup-6.0c.msi
- %WINDIR%\Installer\33077.msi
- C:\Config.Msi\3307a.rbs
- %WINDIR%\Installer\MSI6.tmp
- %TEMP%\mia1\componentstree.dfm
- %TEMP%\{62F6CD6C-F199-4793-886F-60E09AC49DC3}
- %WINDIR%\Installer\33079.ipi
- %WINDIR%\Installer\MSI2.tmp
- %TEMP%\mia.tmp
- %TEMP%\lang.loc
- %WINDIR%\Installer\MSI5.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- %TEMP%\mia1\mDownExec.dll
- %TEMP%\mia1\maintenance.dfm
- %TEMP%\mia1\licensecheck.dfm.miaf
- %TEMP%\mia1\prereq.dfm.miaf
- %TEMP%\mia1\prereq.dfm
- %TEMP%\mia1\mMSIExec.dll
- %TEMP%\mia1\finish.dfm
- %TEMP%\mia1\DisplayFusionSetup-6.0c.msi
- %TEMP%\mia1\destination.dfm
- %TEMP%\mia1\licensecheck.dfm
- %TEMP%\mia1\installaware.png
- %TEMP%\mia1\icon.ico
- 'be##rat.com':80
- 'ge.tt':80
- 'localhost':1036
- be##rat.com/wp-content/uploads/2014/06/RtHDVCpl.exe
- ge.tt/api/1/files/12y7rnp1/0/blob?do######
- DNS ASK be##rat.com
- DNS ASK ge.tt
- ClassName: 'Shell_TrayWnd' WindowName: ''