Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ZipMail OE System Tray add-on' = '"%ProgramFiles%\MK Net Work\ZipMail Outlook\zmstOE.exe"'
Modifies file system:
Creates the following files:
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\_isres.dll
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ISUninst.728
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\Ctl3d32.dll
- %WINDIR%\IsUninst.exe
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\value.shl
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ZipMail outlook.bmp
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\Corecomp.ini
- %WINDIR%\_iserr31.ini
- %TEMP%\_ISTMP1.DIR\_INS0432.INI
- %TEMP%\_ISTMP1.DIR\_WUTL951.DLL
- %TEMP%\_mkzm\Disk1\setup.log
- %WINDIR%\_delis32.ini
- %WINDIR%\_isenv31.ini
- %WINDIR%\mksh.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\Uninst.dll
- %ProgramFiles%\MK Net Work\ZipMail Outlook\W2kDlg.dll
- %ProgramFiles%\MK Net Work\ZipMail Outlook\zipm32.dll
- %ProgramFiles%\MK Net Work\ZipMail Outlook\MKzipExt.dll
- %ProgramFiles%\MK Net Work\ZipMail Outlook\MKZipMgr.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\ZMOL.lic
- %ProgramFiles%\MK Net Work\ZipMail Outlook\zmstoe.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\zmail32.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\Uninst.isu
- %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\ZMdzip.dll
- %ProgramFiles%\MK Net Work\ZipMail Outlook\EndSetup.728
- %ProgramFiles%\MK Net Work\ZipMail Outlook\DropOL.dll
- %TEMP%\_ISTMP1.DIR\ZDataI51.dll
- %TEMP%\_mkzm\Disk1\EndSetup.exe
- %TEMP%\_mkzm\Disk1\data1.hdr
- %TEMP%\_mkzm\Disk1\data1.cab
- %TEMP%\_mkzm\Disk1\layout.bin
- %TEMP%\_mkzm\Disk1\lang.dat
- %TEMP%\_mkzm\Disk1\Killmpsp.exe
- %TEMP%\_mkzm\Disk1\DATA.TAG
- %TEMP%\_mkzm\Disk1\_sys1.cab
- %TEMP%\_mkzm\Disk1\_ISDel.exe
- %TEMP%\_mkzm\Disk1\_INST32I.EX_
- %TEMP%\_mkzm\Disk1\_user1.hdr
- %TEMP%\_mkzm\Disk1\_user1.cab
- %TEMP%\_mkzm\Disk1\_sys1.hdr
- %TEMP%\_mkzm\Disk1\mkmon.exe
- %TEMP%\_mkzm\Disk1\setupdir\040c\_Setup.dll
- %TEMP%\_mkzm\Disk1\setupdir\0009\_Setup.dll
- %TEMP%\_mkzm\Disk1\setupdir\0007\_Setup.dll
- %TEMP%\_ISTMP1.DIR\_INS5576._MP
- %TEMP%\_mkzm\Disk1\ZM.ico
- %TEMP%\_mkzm\Disk1\z_uninst.exe
- %TEMP%\_mkzm\Disk1\setup.lid
- %TEMP%\_mkzm\Disk1\Setup.exe
- %TEMP%\_mkzm\Disk1\os.dat
- %TEMP%\_mkzm\Disk1\MKsh.exe
- %TEMP%\_mkzm\Disk1\setup.iss
- %TEMP%\_mkzm\Disk1\setup.ins
- %TEMP%\_mkzm\Disk1\SETUP.INI
Deletes the following files:
- %TEMP%\_mkzm\Disk1\_sys1.hdr
- %TEMP%\_mkzm\Disk1\_sys1.cab
- %TEMP%\_mkzm\Disk1\_user1.hdr
- %TEMP%\_mkzm\Disk1\_user1.cab
- %TEMP%\_mkzm\Disk1\_ISDel.exe
- %TEMP%\_mkzm\Disk1\ZM.ico
- %TEMP%\_mkzm\Disk1\setup.log
- %TEMP%\_mkzm\Disk1\_INST32I.EX_
- %TEMP%\_mkzm\Disk1\z_uninst.exe
- %TEMP%\_mkzm\Disk1\setupdir\0007\_Setup.dll
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\value.shl
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ISUninst.exe
- %WINDIR%\mksh.exe
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ZipMail outlook.bmp
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\Ctl3d32.dll
- %TEMP%\_mkzm\Disk1\setupdir\040c\_Setup.dll
- %TEMP%\_mkzm\Disk1\setupdir\0009\_Setup.dll
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\Corecomp.ini
- %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\4128a.DLL
- %TEMP%\_mkzm\Disk1\data1.hdr
- %TEMP%\_mkzm\Disk1\data1.cab
- %TEMP%\_mkzm\Disk1\Killmpsp.exe
- %TEMP%\_mkzm\Disk1\EndSetup.exe
- %TEMP%\_mkzm\Disk1\DATA.TAG
- %WINDIR%\_iserr31.ini
- %TEMP%\_ISTMP1.DIR\_INS0432.INI
- %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.exe
- %WINDIR%\_isenv31.ini
- %TEMP%\_mkzm\Disk1\lang.dat
- %TEMP%\_mkzm\Disk1\setup.ins
- %TEMP%\_mkzm\Disk1\SETUP.INI
- %TEMP%\_mkzm\Disk1\setup.lid
- %TEMP%\_mkzm\Disk1\setup.iss
- %TEMP%\_mkzm\Disk1\Setup.exe
- %TEMP%\_mkzm\Disk1\mkmon.exe
- %TEMP%\_mkzm\Disk1\layout.bin
- %TEMP%\_mkzm\Disk1\os.dat
- %TEMP%\_mkzm\Disk1\MKsh.exe
Moves the following files:
- from %ProgramFiles%\MK Net Work\ZipMail Outlook\EndSetup.728 to %ProgramFiles%\MK Net Work\ZipMail Outlook\EndSetup.exe
- from %ProgramFiles%\MK Net Work\ZipMail Outlook\zmail32.728 to %ProgramFiles%\MK Net Work\ZipMail Outlook\zmail32.exe
- from %ProgramFiles%\MK Net Work\ZipMail Outlook\MKZipMgr.728 to %ProgramFiles%\MK Net Work\ZipMail Outlook\MKZipMgr.exe
- from %ProgramFiles%\MK Net Work\ZipMail Outlook\zmstoe.728 to %ProgramFiles%\MK Net Work\ZipMail Outlook\zmstoe.exe
- from %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\_isres.dll to %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\4128a.DLL
- from %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ISUninst.728 to %TEMP%\_ISTMP1.DIR\_ISTMP0.DIR\ISUninst.exe
- from %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.728 to %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.exe
- from %WINDIR%\mksh.728 to %WINDIR%\mksh.exe
Substitutes the following files:
- %TEMP%\_mkzm\Disk1\setup.log
- %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.exe
- %ProgramFiles%\MK Net Work\ZipMail Outlook\mksh.728
Miscellaneous:
Searches for the following windows:
- ClassName: 'Outlook Express Browser Class' WindowName: ''
- ClassName: 'ATH_Note' WindowName: ''
- ClassName: 'zmailSTOE' WindowName: ''
- ClassName: '#32770' WindowName: 'ZipMail V8 for MS Outlook - Setup'
- ClassName: 'Microsoft Exchange 4.0 Viewer' WindowName: ''
- ClassName: 'rctrl_renwnd32' WindowName: ''
Creates and executes the following:
- '%TEMP%\_mkzm\Disk1\Killmpsp.exe' /f MAPISP32
- '%TEMP%\_mkzm\Disk1\Killmpsp.exe' /f OUTLOOK
- '%ProgramFiles%\MK Net Work\ZipMail Outlook\EndSetup.exe' MK Net.Work S.A. - ZipMail#ZipMail setup has completed successfully.§Thank you for choosing our software.#_mkzm
- '%ProgramFiles%\MK Net Work\ZipMail Outlook\zmstoe.exe'
- '%TEMP%\_ISTMP1.DIR\_INS5576._MP'
- '%TEMP%\_mkzm\Disk1\Setup.exe' -s
- '%TEMP%\_mkzm\Disk1\mkmon.exe' /TITL=ZipMail V8 for MS Outlook - Setup/TEXT=ZipMail V8 for MS Outlook/GAUGECAPT=Setup in progress: 0%/CURSTEPCAPT=Current step:/CURSTEP=Setup initialization.../LOGCAPT=Setup log file is in:/...
- '%TEMP%\_mkzm\Disk1\_ISDel.exe'
