Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Classes\ummy\shell\open\command] '' = '"%ProgramFiles%\UmmyVideoDownloader\UmmyVideoDownloader.exe" "%1"'
Modifies file system:
Creates the following files:
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-L3DJI.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-06F32.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-RODNS.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-PCQV8.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-R9A9M.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-TDG4T.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-KNDB1.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-H4VES.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-Q73AA.tmp
- %HOMEPATH%\Desktop\UmmyVideoDownloader.lnk
- %HOMEPATH%\Start Menu\Programs\UmmyVideoDownloader\Help\English.lnk
- C:\Documents
- %ProgramFiles%\UmmyVideoDownloader\unins000.dat
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\help\is-583II.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-INDQQ.tmp
- %HOMEPATH%\Start Menu\Programs\UmmyVideoDownloader\Uninstall.lnk
- %HOMEPATH%\Start Menu\Programs\UmmyVideoDownloader\UmmyVideoDownloader.lnk
- %TEMP%\$inst\0002.tmp
- %TEMP%\$inst\0001.tmp
- %ProgramFiles%\UmmyVideoDownloader\is-25LVV.tmp
- %TEMP%\is-BFTHP.tmp\UmmyVideoDownloader_1.8_zyzoom.net.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe
- %APPDATA%\Microsoft\Silent.bat
- %ProgramFiles%\UmmyVideoDownloader\is-V70FI.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-K0NTE.tmp
- %ProgramFiles%\UmmyVideoDownloader\is-F1S32.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-A2136.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-EET2M.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-U67J4.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-0VR4P.tmp
- %ProgramFiles%\UmmyVideoDownloader\is-5S5AK.tmp
- %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-55HG0.tmp
Sets the 'hidden' attribute to the following files:
- %APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe
- %APPDATA%\Microsoft\Silent.bat
Deletes the following files:
- %TEMP%\is-BFTHP.tmp\UmmyVideoDownloader_1.8_zyzoom.net.tmp
- %APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe
- %TEMP%\$inst\0002.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\0001.tmp
Moves the following files:
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-06F32.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.eng
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-L3DJI.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.esp
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-KNDB1.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.deu
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-R9A9M.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\rus.po
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-H4VES.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.ara
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-INDQQ.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\trk.po
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\help\is-583II.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\help\Ummy_eng.pdf
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-Q73AA.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.trk
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-PCQV8.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.ind
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-RODNS.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\tips.rus
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-TDG4T.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\ind.po
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-U67J4.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\libcrypto-1_1.dll
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-55HG0.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\libssl-1_1.dll
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\is-0VR4P.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\ffmpeg.exe
- from %ProgramFiles%\UmmyVideoDownloader\is-25LVV.tmp to %ProgramFiles%\UmmyVideoDownloader\unins000.exe
- from %ProgramFiles%\UmmyVideoDownloader\is-V70FI.tmp to %ProgramFiles%\UmmyVideoDownloader\UmmyVideoDownloader.exe
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-EET2M.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\deu.po
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-A2136.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\esp.po
- from %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\is-K0NTE.tmp to %ProgramFiles%\UmmyVideoDownloader\1.8.2.0\lang\ara.po
- from %ProgramFiles%\UmmyVideoDownloader\is-5S5AK.tmp to %ProgramFiles%\UmmyVideoDownloader\settings.uvd
- from %ProgramFiles%\UmmyVideoDownloader\is-F1S32.tmp to %ProgramFiles%\UmmyVideoDownloader\License.txt
Miscellaneous:
Creates and executes the following:
- '%TEMP%\is-BFTHP.tmp\UmmyVideoDownloader_1.8_zyzoom.net.tmp' /SL5="$10138,21230163,171520,%APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe" /VERYSILENT /SUPPRESSMSGBOXES /PASSWORD=zyzoom.net /NORESTART /SP-
- '%APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe' /VERYSILENT /SUPPRESSMSGBOXES /PASSWORD=zyzoom.net /NORESTART /SP-
Executes the following:
- '<SYSTEM32>\attrib.exe' -r -a -s -h "%APPDATA%\Microsoft\UmmyVideoDownloader_1.8_zyzoom.net.exe"
- '<SYSTEM32>\attrib.exe' -r -a -s -h "%APPDATA%\Microsoft\Silent.bat"
- '<SYSTEM32>\cmd.exe' /c ""%APPDATA%\Microsoft\Silent.bat" "
- '<SYSTEM32>\sc.exe' stop "PcaSvc"
