Техническая информация
- '%TEMP%\mia1.tmp\email-extractor-setup.exe' /m="<Полный путь к вирусу>" /k=""
- '<SYSTEM32>\msiexec.exe' -Embedding F1A8B605DFAA1C34AD49C7844BBDD700
- '<SYSTEM32>\msiexec.exe' /V
- %PROGRAM_FILES%\Email Extractor\whois_servers.csv
- %PROGRAM_FILES%\Email Extractor\Interop.SHDocVw.dll
- %PROGRAM_FILES%\Email Extractor\AxInterop.SHDocVw.dll
- C:\Config.Msi\28a76.rbs
- %PROGRAM_FILES%\Email Extractor\EmailExtractor.exe
- %PROGRAM_FILES%\Email Extractor\SearchEngines.xml
- %PROGRAM_FILES%\Email Extractor\fr\EmailExtractor.resources.dll
- %PROGRAM_FILES%\Email Extractor\ICSharpCode.SharpZipLib.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.BonusSkins.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\ru\EmailExtractor.resources.dll
- %PROGRAM_FILES%\Email Extractor\es\EmailExtractor.resources.dll
- %PROGRAM_FILES%\Email Extractor\de\EmailExtractor.resources.dll
- %WINDIR%\Installer\MSI6.tmp
- %TEMP%\mia1\mWinRunExec.dll
- %TEMP%\mia1\email-extractor-setup.msi
- %TEMP%\{30482B99-CAD6-4370-8A3B-8939BCDC90EC}
- %TEMP%\mia1\wizard.dfm
- %TEMP%\mia1\mDotNetExec.dll
- %TEMP%\mia1\mMSIExec.dll
- %WINDIR%\Installer\MSI3.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI5.tmp
- %WINDIR%\Installer\28a73.msi
- %WINDIR%\Installer\MSI2.tmp
- %WINDIR%\Installer\{30482B99-CAD6-4370-8A3B-8939BCDC90EC}\or5cimg5cEmaiExtractor.ico0.ico
- %WINDIR%\Installer\{30482B99-CAD6-4370-8A3B-8939BCDC90EC}\35cimg5ccommon5cEnable.ico0.ico
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\email-extractor-setup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Email Extractor\Email Extractor.lnk
- %ALLUSERSPROFILE%\Desktop\Email Extractor.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Email Extractor\Buy now.lnk
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\email-extractor-setup.dat
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\email-extractor-setup.par
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\instance.dat
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\email-extractor-setup.msi
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\email-extractor-setup.res
- %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\mia.lib
- %ALLUSERSPROFILE%\Start Menu\Programs\Email Extractor\Uninstall.lnk
- %PROGRAM_FILES%\Email Extractor\DevExpress.XtraBars.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.XtraEditors.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.XtraGrid.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.Data.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.Printing.v11.1.Core.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.Utils.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.OfficeSkins.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\it\EmailExtractor.resources.dll
- %PROGRAM_FILES%\Email Extractor\pl\EmailExtractor.resources.dll
- %PROGRAM_FILES%\Email Extractor\DevExpress.XtraLayout.v11.1.dll
- %PROGRAM_FILES%\Email Extractor\Microsoft.Office.Interop.Excel.dll
- %PROGRAM_FILES%\Email Extractor\pt\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF344\CF63EFE5\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF348\CF63EFE5\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF332\162DD470\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF342\DD918D98\DevExpress.XtraLayout.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF346\13969254\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF347\8E90A668\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF334\DD918D98\ICSharpCode.SharpZipLib.dll
- %TEMP%\mia1.tmp\OFFLINE\IF327\D991067D\Interop.SHDocVw.dll
- %TEMP%\mia1.tmp\OFFLINE\mDotNet.dll\mDotNetExec.dll
- %TEMP%\mia1.tmp\OFFLINE\IF331\5D2B0243\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF333\3E6B335F\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF330\47750E09\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF341\DD918D98\DevExpress.XtraGrid.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF322\DD918D98\EmailExtractor.exe
- %TEMP%\mia1.tmp\OFFLINE\IF329\DD918D98\AxInterop.SHDocVw.dll
- %TEMP%\mia1.tmp\OFFLINE\IF335\DD918D98\DevExpress.BonusSkins.v11.1.dll
- %TEMP%\mia1.tmp\email-extractor-setup.msi
- %TEMP%\mia1.tmp\OFFLINE\IF325\DD918D98\SearchEngines.xml
- %TEMP%\mia1.tmp\email-extractor-setup.exe
- %TEMP%\mia1.tmp\OFFLINE\IF338\DD918D98\DevExpress.Utils.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF339\DD918D98\DevExpress.XtraBars.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF340\DD918D98\DevExpress.XtraEditors.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF336\DD918D98\DevExpress.Data.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF345\DD918D98\DevExpress.OfficeSkins.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF337\DD918D98\DevExpress.Printing.v11.1.Core.dll
- %TEMP%\mia1\progress.dfm
- %TEMP%\mia1\progressprereq.dfm
- %TEMP%\mia1\readme.dfm
- %TEMP%\mia1\licensecheck.dfm
- %TEMP%\mia1\maintenance.dfm
- %TEMP%\mia1\prereq.dfm
- %TEMP%\mia1\startinstallation.dfm
- %TEMP%\mia1\startmenu.dfm
- %TEMP%\mia1\welcome.dfm
- %TEMP%\mia1\registration.dfm
- %TEMP%\mia1\registrationwithserial.dfm
- %TEMP%\mia1\setuptype.dfm
- %TEMP%\mia1\finish.dfm
- %TEMP%\mia1.tmp\mia.lib
- %TEMP%\mia1.tmp\OFFLINE\IF328\DD918D98\EmailExtractor.exe.config
- %TEMP%\mia1.tmp\OFFLINE\IF326\DD918D98\whois_servers.csv
- %TEMP%\mia1.tmp\OFFLINE\IF343\DD918D98\Microsoft.Office.Interop.Excel.dll
- %TEMP%\mia1.tmp\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia1.tmp\OFFLINE\mWinRun.dll\mWinRunExec.dll
- %TEMP%\mia.tmp
- %TEMP%\mia1\componentstree.dfm
- %TEMP%\mia1\destination.dfm
- %TEMP%\mia1.tmp\email-extractor-setup.res
- %TEMP%\lang.loc
- %TEMP%\mia1\installaware.png
- C:\Config.Msi\28a77.rbf
- C:\Config.Msi\28a76.rbs
- C:\Config.Msi\28a77.rbf
- %WINDIR%\Installer\MSI6.tmp
- %TEMP%\{30482B99-CAD6-4370-8A3B-8939BCDC90EC}
- %WINDIR%\Installer\28a75.ipi
- %WINDIR%\Installer\28a73.msi
- %WINDIR%\Installer\MSI2.tmp
- %TEMP%\mia.tmp
- %TEMP%\lang.loc
- %WINDIR%\Installer\MSI5.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- %TEMP%\mia1.tmp\OFFLINE\IF343\DD918D98\Microsoft.Office.Interop.Excel.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF343\DD918D98\Microsoft.Office.Interop.Excel.dll
- %TEMP%\mia1.tmp\OFFLINE\IF344\CF63EFE5\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF344\CF63EFE5\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF345\DD918D98\DevExpress.OfficeSkins.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF345\DD918D98\DevExpress.OfficeSkins.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF342\DD918D98\DevExpress.XtraLayout.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF342\DD918D98\DevExpress.XtraLayout.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF339\DD918D98\DevExpress.XtraBars.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF339\DD918D98\DevExpress.XtraBars.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF340\DD918D98\DevExpress.XtraEditors.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF340\DD918D98\DevExpress.XtraEditors.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF341\DD918D98\DevExpress.XtraGrid.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF341\DD918D98\DevExpress.XtraGrid.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\mMSI.dll\mMSIExec.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia1.tmp\OFFLINE\mWinRun.dll\mWinRunExec.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\mWinRun.dll\mWinRunExec.dll
- %PROGRAM_FILES%\Email Extractor\pt\EmailExtractor.resources.dll в C:\Config.Msi\28a77.rbf
- %TEMP%\mia1.tmp\OFFLINE\mDotNet.dll\mDotNetExec.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\mDotNet.dll\mDotNetExec.dll
- %TEMP%\mia1.tmp\OFFLINE\IF346\13969254\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF346\13969254\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF347\8E90A668\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF347\8E90A668\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF348\CF63EFE5\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF348\CF63EFE5\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF338\DD918D98\DevExpress.Utils.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF338\DD918D98\DevExpress.Utils.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF328\DD918D98\EmailExtractor.exe.config в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF328\DD918D98\EmailExtractor.exe.config
- %TEMP%\mia1.tmp\OFFLINE\IF329\DD918D98\AxInterop.SHDocVw.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF329\DD918D98\AxInterop.SHDocVw.dll
- %TEMP%\mia1.tmp\OFFLINE\IF330\47750E09\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF330\47750E09\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF327\D991067D\Interop.SHDocVw.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF327\D991067D\Interop.SHDocVw.dll
- %TEMP%\mia1.tmp\OFFLINE\IF322\DD918D98\EmailExtractor.exe в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF322\DD918D98\EmailExtractor.exe
- %TEMP%\mia1.tmp\OFFLINE\IF325\DD918D98\SearchEngines.xml в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF325\DD918D98\SearchEngines.xml
- %TEMP%\mia1.tmp\OFFLINE\IF326\DD918D98\whois_servers.csv в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF326\DD918D98\whois_servers.csv
- %TEMP%\mia1.tmp\OFFLINE\IF335\DD918D98\DevExpress.BonusSkins.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF335\DD918D98\DevExpress.BonusSkins.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF336\DD918D98\DevExpress.Data.v11.1.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF336\DD918D98\DevExpress.Data.v11.1.dll
- %TEMP%\mia1.tmp\OFFLINE\IF337\DD918D98\DevExpress.Printing.v11.1.Core.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF337\DD918D98\DevExpress.Printing.v11.1.Core.dll
- %TEMP%\mia1.tmp\OFFLINE\IF334\DD918D98\ICSharpCode.SharpZipLib.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF334\DD918D98\ICSharpCode.SharpZipLib.dll
- %TEMP%\mia1.tmp\OFFLINE\IF331\5D2B0243\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF331\5D2B0243\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF332\162DD470\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF332\162DD470\EmailExtractor.resources.dll
- %TEMP%\mia1.tmp\OFFLINE\IF333\3E6B335F\EmailExtractor.resources.dll в %ALLUSERSPROFILE%\Application Data\{D2F7B5EC-7B66-448E-8C55-04557B5D558E}\OFFLINE\IF333\3E6B335F\EmailExtractor.resources.dll
- ClassName: 'TApplication' WindowName: 'email-extractor-setup'
- ClassName: 'Shell_TrayWnd' WindowName: ''