Technical Information
- [<HKLM>\SYSTEM\ControlSet001\Services\EBP Pervasive.SQL] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] 'C:\PVSW\Bin\w3dbsmgr.exe' = 'C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] 'C:\PVSW\Bin\w3dbsmgr.exe' = 'C:\PVSW\Bin\w3dbsmgr.exe:*:Enabled:Database Service Manager'
- 'C:\PVSW\Bin\w3dbsmgr.exe' -SRDE -SERVICE
- 'C:\PVSW\Bin\WGE_SRV.exe'
- '%TEMP%\mia1.tmp\EBP_Btrieve8.6_SETUP.exe' /m="<Full path to virus>" /k=""
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\poledbsy.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\upiapirb.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\poledb.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\poledber.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\w3csi100.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\w3dcm100.dll"
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram program = "C:\PVSW\Bin\w3dbsmgr.exe" name = "Database Service Manager" scope = ALL profile = ALL
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\W3csm100.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\w3csp100.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\pctlgrb.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\clientrb.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\dbcsipxy.dll"
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\msiexec.exe' -Embedding 3385F1AA38C04DA0D9DF345A2AA915AD
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\dto2.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\mkc.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\mkderb.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\legacylm.dll"
- '<SYSTEM32>\msiexec.exe' /Y "C:\PVSW\Bin\licmgrrb.dll"
- C:\PVSW\Bin\timgrrb.dll
- C:\PVSW\Bin\swcomp32.dll
- C:\PVSW\Bin\rsiddf.dll
- C:\PVSW\Bin\w3btrv7.dll
- C:\PVSW\Bin\w3aif10C.dll
- C:\PVSW\Bin\w32btxlt.dll
- C:\PVSW\Bin\pvkillwg.exe
- C:\PVSW\Bin\pvjdbc2x.jar
- C:\PVSW\Bin\pvjdbc2.jar
- C:\PVSW\Bin\RelTest.dll
- C:\PVSW\Bin\pvmsgrb.dll
- C:\PVSW\Bin\pvlocate.exe
- C:\PVSW\Bin\w3dbnv7.dll
- C:\PVSW\Bin\w3dbav80.dll
- C:\PVSW\Bin\w3dbav78.dll
- C:\PVSW\Bin\w3enc107.dll
- C:\PVSW\Bin\w3ddf103.dll
- C:\PVSW\Bin\w3dbsmgr.exe
- C:\PVSW\Bin\w3clnrsx.dll
- C:\PVSW\Bin\w3clnres.dll
- C:\PVSW\Bin\w3cache.dll
- C:\PVSW\Bin\w3dbav75.dll
- C:\PVSW\Bin\w3crs10F.dll
- C:\PVSW\Bin\w3comsrv.dll
- C:\PVSW\Bin\confmrb.dll
- C:\PVSW\Bin\cnstring.dll
- C:\PVSW\Bin\clilcadm.exe
- C:\PVSW\Bin\jpscs.jar
- C:\PVSW\Bin\enginelm.dll
- C:\PVSW\Bin\dto.dll
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- %WINDIR%\Installer\MSI2.tmp
- C:\Config.Msi\1d1b5.rbs
- %WINDIR%\Installer\MSI6.tmp
- %WINDIR%\Installer\MSI5.tmp
- C:\PVSW\Bin\pssax.dll
- C:\PVSW\Bin\psregsvr.exe
- C:\PVSW\Bin\pscore.dll
- C:\PVSW\Bin\pvdsncon.exe
- C:\PVSW\Bin\pvdrmsrb.dll
- C:\PVSW\Bin\psutilrb.dll
- C:\PVSW\Bin\lisezmoi.rtf
- C:\PVSW\Bin\jsbdosws.exe
- C:\PVSW\Bin\jsbdosws.dll
- C:\PVSW\Bin\pscl.dll
- C:\PVSW\Bin\pceurop.dll
- C:\PVSW\Bin\ntpsinst.dll
- C:\PVSW\Bin\w3exp010.dll
- C:\PVSW\Bin\poledbsy.dll
- C:\PVSW\Bin\poledber.dll
- C:\PVSW\Bin\poledb.dll
- C:\PVSW\Bin\W3csm100.dll
- C:\PVSW\Bin\w3csi100.dll
- C:\PVSW\Bin\upiapirb.dll
- C:\PVSW\Bin\licmgrrb.dll
- C:\PVSW\Bin\legacylm.dll
- C:\PVSW\Bin\dto2.dll
- C:\PVSW\Bin\pctlgrb.dll
- C:\PVSW\Bin\mkderb.dll
- C:\PVSW\Bin\mkc.dll
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\mia.lib
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\EBP_Btrieve8.6_SETUP.res
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\EBP_Btrieve8.6_SETUP.msi
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\instance.dat
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\EBP_Btrieve8.6_SETUP.par
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\EBP_Btrieve8.6_SETUP.dat
- C:\PVSW\Bin\WGE_SRV.exe
- C:\PVSW\Bin\w3dcm100.dll
- C:\PVSW\Bin\w3csp100.dll
- %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\EBP_Btrieve8.6_SETUP.exe
- C:\PVSW\Bin\pvsw_wge.ini
- %WINDIR%\pvsw.log
- C:\PVSW\Bin\W3NSR122.DLL
- C:\PVSW\Bin\w3nsl244.dll
- C:\PVSW\Bin\W3MKDE.DLL
- C:\PVSW\Bin\w3odbcei.dll
- C:\PVSW\Bin\w3odbccs.dll
- C:\PVSW\Bin\w3odbcci.dll
- C:\PVSW\Bin\w3mgrmsg.dll
- C:\PVSW\Bin\w3lgo103.exe
- C:\PVSW\Bin\W3ICR104.DLL
- C:\PVSW\Bin\w3mif165.dll
- C:\PVSW\Bin\w3mgrrsx.dll
- C:\PVSW\Bin\w3mgrres.dll
- C:\PVSW\Bin\wbtrv32.dll
- C:\PVSW\Bin\wbtrcall.dll
- C:\PVSW\Bin\WBEXEC32.exe
- C:\PVSW\Bin\dbcsipxy.dll
- C:\PVSW\Bin\clientrb.dll
- C:\PVSW\Bin\wdbuui32.dll
- C:\PVSW\Bin\w3sqlmgr.dll
- C:\PVSW\Bin\w3scmv7.dll
- C:\PVSW\Bin\w3odbces.dll
- C:\PVSW\Bin\w3xlt101.dll
- C:\PVSW\Bin\W3UPI234.dll
- C:\PVSW\Bin\w3sqlv7.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledb.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\pctlgrb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pceurop.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pscl.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledbsy.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledber.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\licmgrrb.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\legacylm.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jsbdosws.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\ntpsinst.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\mkderb.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\mkc.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\timgrrb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\swcomp32.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\rsiddf.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3aif10C.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w32btxlt.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\upiapirb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\psutilrb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pssax.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pscore.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\RelTest.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvmsgrb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvdrmsrb.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\psregsvr.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jsbdosws.exe
- %TEMP%\mia1.tmp\EBP_Btrieve8.6_SETUP.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvlocate.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvkillwg.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvdsncon.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvjdbc2x.jar
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvjdbc2.jar
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jpscs.jar
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\clilcadm.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\lisezmoi.rtf
- %TEMP%\mia1.tmp\EBP_Btrieve8.6_SETUP.msi
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\dto.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\dbcsipxy.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\confmrb.dll
- %TEMP%\mia1.tmp\OFFLINE\FirewallIDEPlugIn.dll\FirewallEXEPlugIn.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\enginelm.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\dto2.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\WBEXEC32.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3lgo103.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbsmgr.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\cnstring.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\clientrb.dll
- %TEMP%\mia1.tmp\OFFLINE\__servdev_SetupSources\Btrieve\8.6\DATA\service\WGE_SRV.exe
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3btrv7.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3xlt101.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3UPI234.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3sqlv7.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wdbuui32.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wbtrv32.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wbtrcall.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbcei.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbccs.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbcci.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3sqlmgr.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3scmv7.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbces.dll
- %TEMP%\mia1\mMSIExec.dll
- %TEMP%\mia1\FirewallEXEPlugIn.dll
- %TEMP%\mia1\progress.dfm
- %WINDIR%\Installer\1d1b2.msi
- %TEMP%\{747D0A04-5BDA-478D-A010-68CCCBE4D15A}
- %TEMP%\mia1\EBP_Btrieve8.6_SETUP.msi
- %TEMP%\lang.loc
- %TEMP%\mia1.tmp\EBP_Btrieve8.6_SETUP.res
- %TEMP%\mia1.tmp\mia.lib
- %TEMP%\mia1\maintenance.dfm
- %TEMP%\mia1\finish.dfm
- %TEMP%\mia.tmp
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav75.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3csp100.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\W3csm100.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbnv7.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav80.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav78.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3clnrsx.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3clnres.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3cache.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3csi100.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3crs10F.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3comsrv.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mif165.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrrsx.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrres.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3NSR122.DLL
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3nsl244.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3MKDE.DLL
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3enc107.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3ddf103.dll
- %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3dcm100.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrmsg.dll
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3ICR104.DLL
- %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3exp010.dll
- %WINDIR%\Installer\MSI6.tmp
- %WINDIR%\Installer\MSI5.tmp
- C:\Config.Msi\1d1b5.rbs
- %TEMP%\{747D0A04-5BDA-478D-A010-68CCCBE4D15A}
- %WINDIR%\Installer\1d1b2.msi
- %TEMP%\mia.tmp
- %TEMP%\lang.loc
- %WINDIR%\Installer\MSI2.tmp
- %WINDIR%\Installer\MSI4.tmp
- %WINDIR%\Installer\MSI3.tmp
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbsmgr.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3dbsmgr.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3ddf103.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3ddf103.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbnv7.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3dbnv7.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav78.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3dbav78.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav80.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3dbav80.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3lgo103.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3lgo103.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrmsg.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3mgrmsg.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3ICR104.DLL to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\W3ICR104.DLL
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3enc107.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3enc107.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3exp010.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3exp010.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3btrv7.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3btrv7.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3cache.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3cache.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3aif10C.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3aif10C.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\timgrrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\timgrrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w32btxlt.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w32btxlt.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3crs10F.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3crs10F.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3dbav75.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3dbav75.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3comsrv.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3comsrv.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3clnres.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3clnres.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3clnrsx.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3clnrsx.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrres.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3mgrres.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3xlt101.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3xlt101.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\WBEXEC32.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\WBEXEC32.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3UPI234.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\W3UPI234.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3sqlmgr.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3sqlmgr.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3sqlv7.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3sqlv7.dll
- from %TEMP%\mia1.tmp\OFFLINE\FirewallIDEPlugIn.dll\FirewallEXEPlugIn.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\FirewallIDEPlugIn.dll\FirewallEXEPlugIn.dll
- from %TEMP%\mia1.tmp\OFFLINE\__servdev_SetupSources\Btrieve\8.6\DATA\service\WGE_SRV.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\__servdev_SetupSources\Btrieve\8.6\DATA\service\WGE_SRV.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wdbuui32.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\wdbuui32.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wbtrcall.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\wbtrcall.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\wbtrv32.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\wbtrv32.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3nsl244.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3nsl244.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3NSR122.DLL to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\W3NSR122.DLL
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\W3MKDE.DLL to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\W3MKDE.DLL
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mgrrsx.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3mgrrsx.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3mif165.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3mif165.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbces.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3odbces.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3scmv7.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3scmv7.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbcei.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3odbcei.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbcci.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3odbcci.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\w3odbccs.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\w3odbccs.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\swcomp32.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\swcomp32.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\W3csm100.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\W3csm100.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3csp100.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\w3csp100.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3csi100.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\w3csi100.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledbsy.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\poledbsy.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\upiapirb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\upiapirb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\confmrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\confmrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\dto.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\dto.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\cnstring.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\cnstring.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\w3dcm100.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\w3dcm100.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\clilcadm.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\clilcadm.exe
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\legacylm.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\legacylm.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\licmgrrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\licmgrrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\dto2.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\dto2.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\clientrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\clientrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\dbcsipxy.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\dbcsipxy.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\poledb.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\poledber.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\poledber.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\pctlgrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\pctlgrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\mkc.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\mkc.dll
- from %TEMP%\mia1.tmp\OFFLINE\BD548851\62BAE64C\mkderb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\BD548851\62BAE64C\mkderb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\enginelm.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\enginelm.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvjdbc2.jar to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvjdbc2.jar
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvjdbc2x.jar to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvjdbc2x.jar
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvdsncon.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvdsncon.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\psutilrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\psutilrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvdrmsrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvdrmsrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\RelTest.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\RelTest.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\rsiddf.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\rsiddf.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvmsgrb.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvmsgrb.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvkillwg.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvkillwg.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pvlocate.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pvlocate.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\lisezmoi.rtf to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\lisezmoi.rtf
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\ntpsinst.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\ntpsinst.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jsbdosws.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\jsbdosws.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jpscs.jar to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\jpscs.jar
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\jsbdosws.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\jsbdosws.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\psregsvr.exe to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\psregsvr.exe
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pssax.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pssax.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pscore.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pscore.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pceurop.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pceurop.dll
- from %TEMP%\mia1.tmp\OFFLINE\EBBE4C37\1147A1C7\pscl.dll to %ALLUSERSPROFILE%\Application Data\{B33CBE2B-A739-401D-A5E0-041195C4A17B}\offline\EBBE4C37\1147A1C7\pscl.dll
- ClassName: 'TApplication' WindowName: 'EBP_Btrieve8.6_SETUP'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'