Technical Information
- %WINDIR%\Tasks\globalUpdateUpdateTaskMachineCore.job
- %WINDIR%\Tasks\globalUpdateUpdateTaskMachineUA.job
- %WINDIR%\Tasks\fb6b758b-841b-48a1-9306-e7d79fedf791-11.job
- %WINDIR%\Tasks\fb6b758b-841b-48a1-9306-e7d79fedf791-4.job
- [<HKLM>\SYSTEM\ControlSet001\Services\globalUpdate] 'Start' = '00000002'
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /regsvc
- '%PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-4.exe' /jGyMJAs /nzPJIem='Sense' /uCtiSoaI='%PROGRAM_FILES%\Sense\48292.xpi' /itUWgT=48292 /VfHcxapr='000803' /LDCLZoWbz='0' /HLeuUn='0' /niEuO=EA0EA2284CDE461CB637DBBA77B102A8IE /DCRtzJ=a844e10a6cf7285bf0f1bd239ab7f1f5 /wjfHyHPNF=1_34_06_10 /SEmIo=1.34.6.10 /foiMlS=1423085117 /PJNQjyLJg=http://st###.#emoclientnet.com /fnbiQL=http://er####.#emoclientnet.com /nxVhIjzhZ=300 /XmwDk=143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com /xcTqLwrg=0.94 /NnIKhkrdw=a143f44cfd99c4e458cd9ef929de77aa8bdbf60380097480c8d8efc48e28131a8com48292 /VHKqh=https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/48292.rdf /HuQgrC='Sense' /tNLfbA='.' /dNUyd='Object Browser' /XaeuuA=ie /EtPJKWSsm='{"asw":[0, 0, 0]}' /szWufRqQB /YGSVnu /uivRrMU /TPEnPxnq='http://up####.#emoclientnet.com/ff_agent_updates/{CAMP_ID}/update.json' /qjLEfu /nneDSQYp='installer' /fXyNs='%TEMP%\SenseInstaller_1423085117.log'
- '%PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe' /regserver
- '%TEMP%\nsl3.tmp\Mdfqixyy.exe'
- '%TEMP%\comh.227118\GoogleUpdate.exe' /silent /install "appguid={06f9c542-63ca-47a4-a81f-3b5e3594d3a6}&appname=3ad1869d-5a83-490c-a41d-3e42dbc8bbd5&needsadmin=True&lang=en"
- '%PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-11.exe' /hmYmWNl=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
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\msiexec.exe' /V
- opera.exe
- firefox.exe
- iexplore.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\a9114e43b11b7a5351b5a253d9ccb2c1.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\02d6d1167990731d2f436ca29de87b6d.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\options.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\8507b5a7d6859831b7d0fc8e625f7527.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\browser.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\89f97acd351f5e2f3107a15badfaa995.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\dialog.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\a8b424cacf3b40e0507e5935553ecdbf.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\background.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\search_dialog.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\ffCoreFilesIndex.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\9c07c106944f7a9f4cc0c317c6904b4d.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\381f8681d2c49626a2f18270fdf4ba44.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\8eea7bf2b125df8f6093181e46955ddf.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\08e21964209d21f2f710a2ce8dcc81d7.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\a47e4da7663026c369855040f017aa56.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\05d46928ce7a3c62c0b52d20222b795e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\3f84ce211321f3c08b595e893a2172bc.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\1578654100ce272e5d479a4c109c1e76.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\250bf8147714212c9fdb8b47e2e8b3e8.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\b097d46a8bb527a37a8919592fb2909f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\56f2996b37f0e90d5d1aee7a386cbcd5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\options.xul
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\223.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\64.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\191.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\184.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\72.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\220.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\233.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\177.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\263.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\246.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\22.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\98.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\13.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\207.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\userCode\background.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\userCode\extension.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\47.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\193.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\239.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\102.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\17.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\78.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button5.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button2.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\skin.css
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button3.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon24.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\update.css
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\24a4eef16f26ae682dc3b56b87275519.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e6fef82bf244d3c0c6cd3ff0dd4a87e2.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\40a4a79548895d081fbb25cbe344d3f4.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\popup.html
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon48.png
- %WINDIR%\Installer\3e37b.msi
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %WINDIR%\Installer\MSID.tmp
- %TEMP%\MSI3ed3f.LOG
- C:\Config.Msi\3e37e.rbs
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button4.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon16.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\button1.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\panelarrow-up.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\crossrider_statusbar.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\skin\icon128.png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\c44ee03f6c89bfc25a7281cdddb450c2.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\23032d1b3a683f881772ea7221d0c4a5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\368eca2fb0488f159fae4ff320ef2829.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\bc5d1cac54d1d93cb6d9fb3780c44e31.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\4eeefd60e18b99a8c0abb609d3b6b45f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\581c736a032a6c6e5e40fb6d33eeebe5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\installer.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\da0dfb63f8fbae3941d49df18a691964.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\f5f14bf522d4329297a39d81dd2b4694.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\4ad84a9e8f2f9947b6a0cfe5d3f3537f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\b60f6439c7c07a3c6f6862d9e24b4bab.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\core\9b80503a0f4ffd4ad75b15146a7c9c2e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e711f38d926a08da0cd56889df4dd742.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\55b62a4e42d0618d526c942a464b2f84.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\78378596565ef5280f5689a8f1225492.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\ff49b27f099ff378f61d2333243a052e.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\608ddd18ac621eeb4a915fbc0552ded3.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\939c55069e181dfba256d7b90d004d7f.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\e3e925aae1753c86fd184fadfe730aa8.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\5f95e8227c147c9d1c65bbe0a4ee4261.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\4c3d3179a06d9a1b79ea235cbc7593d5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\cd33b69b56973c6070cfbd9ba731d3c5.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome\content\api\ca2f39b8cce92d963f518ba68cbf7048.js
- %TEMP%\comh.227118\psuser.dll
- %TEMP%\comh.227118\psmachine.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdate.exe
- %PROGRAM_FILES%\Sense\1293297481.mxaddon
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\goopdate.dll
- %TEMP%\comh.227118\npGoogleUpdate4.dll
- %TEMP%\comh.227118\GoogleUpdateHelper.msi
- %TEMP%\comh.227118\GoogleUpdateBroker.exe
- %TEMP%\comh.227118\GoogleUpdateOnDemand.exe
- %TEMP%\comh.227118\goopdateres_en.dll
- %TEMP%\comh.227118\goopdate.dll
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-11.exe
- %TEMP%\Cab7.tmp
- %TEMP%\nsv6.tmp\ExecDos.dll
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\C3E814D1CB223AFCD58214D14C3B7EAB
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\C3E814D1CB223AFCD58214D14C3B7EAB
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
- %PROGRAM_FILES%\Sense\360-48292.crx
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791.crx
- %TEMP%\comh.227118\GoogleUpdate.exe
- %TEMP%\nsv6.tmp\StdUtils.dll
- %TEMP%\nsv5.tmp
- %TEMP%\nsv6.tmp\System.dll
- %TEMP%\nsv6.tmp\InstallerUtils2.dll
- %TEMP%\nsv6.tmp\InstallerUtils.dll
- %TEMP%\nsl3.tmp\StdUtils.dll
- %TEMP%\nsl3.tmp\System.dll
- %TEMP%\nsl2.tmp
- %TEMP%\nsl3.tmp\Gmgormvzbufh.tmp
- %TEMP%\nsl3.tmp\Mdfqixyy.exe
- %TEMP%\nsl3.tmp\WrapperUtils.dll
- %TEMP%\nsv6.tmp\88732
- %PROGRAM_FILES%\Sense\utils.exe
- %TEMP%\nsv6.tmp\227741
- %TEMP%\comh.227118\GoogleCrashHandler.exe
- %PROGRAM_FILES%\Sense\Uninstall.exe
- %TEMP%\nsv6.tmp\md5dll.dll
- %TEMP%\nsv6.tmp\nsisos.dll
- %TEMP%\nsv6.tmp\UserInfo.dll
- %TEMP%\nsv6.tmp\update.json
- %TEMP%\nsv6.tmp\inetc.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\244.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\123.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\230.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\16.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\93.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\211.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\268.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\28.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\226.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\155.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\192.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\182.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\195.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\9.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\14.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\104.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\1.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\242.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\91.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\4.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\7.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\21.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\180.js
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\psuser.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateHelper.msi
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\psmachine.dll
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\npGoogleUpdate4.dll
- %PROGRAM_FILES%\globalUpdate\Update\GoogleUpdate.exe
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\goopdateres_en.dll
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\8BD11C4A2318EC8E5A82462092971DEA
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\8BD11C4A2318EC8E5A82462092971DEA
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleCrashHandler.exe
- %TEMP%\CabB.tmp
- %TEMP%\Cab9.tmp
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\chrome.manifest
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\defaults\preferences\prefs.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins.json
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\plugins\183.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\extensionData\manifest.xml
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\locale\en-US\translations.dtd
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateOnDemand.exe
- %PROGRAM_FILES%\globalUpdate\Update\1.3.25.0\GoogleUpdateBroker.exe
- %PROGRAM_FILES%\Sense\48292.xpi
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\143f44cf-d99c-4e45-8cd9-ef929de77aa8@bdbf6038-0097-480c-8d8e-fc48e28131a8.com\install.rdf
- %PROGRAM_FILES%\Sense\fb6b758b-841b-48a1-9306-e7d79fedf791-4.exe
- C:\Config.Msi\3e37e.rbs
- %WINDIR%\Installer\MSID.tmp
- %WINDIR%\Installer\3e37d.ipi
- %WINDIR%\Installer\3e37b.msi
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.sqlite-journal
- %TEMP%\Cab7.tmp
- %TEMP%\nsv6.tmp\227741
- %TEMP%\CabB.tmp
- %TEMP%\Cab9.tmp
- 'www.download.windowsupdate.com':80
- 'cr#.#hawte.com':80
- 'ts####.ws.symantec.com':80
- 'lo##.##moclientnet.com':80
- 'up####.#emoclientnet.com':80
- 'er####.#emoclientnet.com':80
- 'st###.#emoclientnet.com':80
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
- ts####.ws.symantec.com/tss-ca-g2.crl
- cr#.#hawte.com/ThawteTimestampingCA.crl
- er####.#emoclientnet.com/installer-error.gif?ac########################################################################################################################################################################################################################################################################################################################################################################################################
- up####.#emoclientnet.com/installer_updates/000803/update.json
- lo##.##moclientnet.com/monetization.gif?ev#############################################################################################################################################################################################################################################################################################################################################################################
- st###.#emoclientnet.com/installer.gif?ac####################################################################################################################################################################################################################################################################################################################################################################################################################################
- DNS ASK www.download.windowsupdate.com
- DNS ASK cr#.#hawte.com
- DNS ASK ts####.ws.symantec.com
- DNS ASK lo##.##moclientnet.com
- DNS ASK up####.#emoclientnet.com
- DNS ASK er####.#emoclientnet.com
- DNS ASK st###.#emoclientnet.com
- ClassName: 'Shell_TrayWnd' WindowName: ''