Technical Information
Malicious functions:
Executes the following:
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
- '%TEMP%\is-KTR3K.tmp\~oduswdx.tmp' /SL5="$100E0,1607945,134144,%CommonProgramFiles%\~oduswdx.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%CommonProgramFiles%\~oduswdx.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Terminates or attempts to terminate
the following user processes:
- safari.exe
- opera.exe
- firefox.exe
- iexplore.exe
- chrome.exe
Modifies file system:
Creates the following files:
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HFKO7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-JMHC1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CCS1L.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-BT65N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TDB3D.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-QKBDK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-102UA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-A18TH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-BRNQB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LUB85.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-QJMUH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-JB439.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L66UH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MS8DK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-574CS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-91TC9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-72QL9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-1J48R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P6C32.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2GKDB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EONLF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4EJGR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KPR7C.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\unins000.dat
- %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\Uninstall TunesKit Spotify Converter.lnk
- %HOMEPATH%\Desktop\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-6KNQ4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-UQCT1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-4P3GV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-VLH5P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-7C1TS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S3S67.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H7V6P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-29CT9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AOL2I.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-NVKNF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-C2OQB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-EU5A6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-CB0MD.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-F8TD1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-VUSRK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-19AIE.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-P49VR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-23NU3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-IL22J.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-V3LD5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-THV51.tmp
- %TEMP%\aut1.tmp
- %CommonProgramFiles%\~oduswdx.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-A3CHI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-T5TPO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-32BO5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-K96QF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-626QA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-GTNQ7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ODASI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-B8S70.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-ERA7S.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-DANS4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-HBM4E.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-LOU1N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9KKOV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N8G5T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4OKKG.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-U3USR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-7K725.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6OOI8.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-27EFK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-QP6D1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-8EUAM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-J9UQM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-NCRKH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-KE8GB.tmp
Sets the 'hidden' attribute to the following files:
- %CommonProgramFiles%\~oduswdx.tmp
Deletes the following files:
- %CommonProgramFiles%\~oduswdx.tmp
- %TEMP%\is-KTR3K.tmp\~oduswdx.tmp
- %TEMP%\aut1.tmp
Moves the following files:
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CCS1L.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-BT65N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-574CS.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-91TC9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TDB3D.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-A18TH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HFKO7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-JMHC1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-1J48R.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-JB439.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L66UH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9KKOV.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-NVKNF.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MS8DK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-72QL9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LUB85.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-QJMUH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S3S67.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H7V6P.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-29CT9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AOL2I.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2GKDB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EONLF.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4EJGR.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KPR7C.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-7C1TS.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-102UA.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P6C32.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-BRNQB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-QKBDK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-6KNQ4.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-UQCT1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-4P3GV.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-VLH5P.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-VUSRK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_hot.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-23NU3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_pushed.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-C2OQB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon_80.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-EU5A6.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_bg.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-P49VR.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-GTNQ7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_btn_convert.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-IL22J.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_sep.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-19AIE.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\logo.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-F8TD1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-A3CHI.tmp to %ProgramFiles%\TunesKit Spotify Converter\ConvertLibrary.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-K96QF.tmp to %ProgramFiles%\TunesKit Spotify Converter\DuiLib.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-V3LD5.tmp to %ProgramFiles%\TunesKit Spotify Converter\unins000.exe
- from %ProgramFiles%\TunesKit Spotify Converter\is-THV51.tmp to %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-32BO5.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\dialog.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-CB0MD.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\frame.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-626QA.tmp to %ProgramFiles%\TunesKit Spotify Converter\WinSparkle.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-T5TPO.tmp to %ProgramFiles%\TunesKit Spotify Converter\WebStream.dll
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ODASI.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-B8S70.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-ERA7S.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\menu.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-DANS4.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\scrollbar.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4OKKG.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-LOU1N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-HBM4E.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N8G5T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-J9UQM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_progress.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-U3USR.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_icons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-7K725.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_default_cover.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-6OOI8.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-27EFK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-KE8GB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_check.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-8EUAM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_line.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-QP6D1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_dragfiles.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-NCRKH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_bk.png
Network activity:
Connects to:
- 'www.tu###kit.com':80
- 'localhost':1037
TCP:
HTTP GET requests:
- http://www.tu###kit.com/
UDP:
- DNS ASK www.tu###kit.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
