Start:
VirusTotal: C:\Users\salon\AppData\Roaming\CHogWN.dll
VirusTotal: C:\users\salon\AppData\Roaming\Microsoft\ApphdWSD\bootrvps.dll
C:\Users\salon\AppData\Roaming\CHogWN.dll
C:\Users\salon\AppData\Roaming\DpaQDFC.dll
C:\Users\salon\AppData\Roaming\euqwRH.dll
C:\Users\salon\AppData\Roaming\ggUajojJ.dll
CMD: dir /a "C:\users\salon\AppData\Roaming\Microsoft"
CMD: dir /a "C:\users\salon\AppData\Roaming\Microsoft\ApphdWSD"
CMD: dir /a "C:\users\salon\AppData\Roaming\Microsoft\AcWiedDS"
End: