Creates the following files:
- %TEMP%\nsi2.tmp\ns4.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\tmp6.tmp
- %TEMP%\nsi2.tmp\nsExec.dll
- <LS_APPDATA>\Opera\Opera\widgets\widgets.dat
- <LS_APPDATA>\Opera\Opera\widgets\nsj3.tmp
- %TEMP%\nsi2.tmp\System.dll
- %TEMP%\nsi2.tmp\ns8.tmp
- %TEMP%\nsi2.tmp\md5dll.dll
- %TEMP%\nsi2.tmp\inetc.dll
- <LS_APPDATA>\Opera\Opera\widgets\TempWmicBatchFile.bat
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\tmp7.tmp
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- <LS_APPDATA>\Opera\Opera\widgets\wuid-c1172790-204a-884c-8cd5-67613e219aa1\prefs.dat
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{718030f7-c27a-474f-9b0e-17a3a9e97398}\chrome\content\vksmiles.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{718030f7-c27a-474f-9b0e-17a3a9e97398}\chrome\content\style.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{718030f7-c27a-474f-9b0e-17a3a9e97398}\install.rdf
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{718030f7-c27a-474f-9b0e-17a3a9e97398}\chrome.manifest
- %TEMP%\nsi2.tmp\nsProcess.dll
- %TEMP%\smiles.xpi
- %TEMP%\nsi2.tmp\nsUnzip.dll
- <LS_APPDATA>\Google\Chrome\User Data\Default\updPleerInfo.exe
- <LS_APPDATA>\Opera\Opera\widgets\smiles.oex
- %TEMP%\opera.patch.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.json
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\smilehelp.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\updateSm.exe
Deletes the following files:
- %TEMP%\tmp6.tmp
- %TEMP%\tmp5.tmp
- %TEMP%\tmp7.tmp
- %TEMP%\nsi2.tmp\ns8.tmp
- %TEMP%\nsi2.tmp\ns4.tmp
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\smilehelp.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\updateSm.exe
- <LS_APPDATA>\Opera\Opera\widgets\widgets.dat
- <LS_APPDATA>\Google\Chrome\User Data\Default\updPleerInfo.exe
Moves the following files:
- from <LS_APPDATA>\Opera\Opera\widgets\nsj3.tmp to <LS_APPDATA>\Opera\Opera\widgets\widgets.dat