Technical Information
Malicious functions:
Terminates or attempts to terminate
the following user processes:
- safari.exe
- opera.exe
- firefox.exe
- iexplore.exe
- chrome.exe
Modifies file system:
Creates the following files:
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-SJV5T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-KA8LU.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-977PT.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-AAJ0H.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DRVGB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-J9D6H.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-J8JU9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-IHU7M.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MDUSK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-GORQ1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-1EB0K.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-0BR40.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9HGFJ.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-MV89C.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LH014.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-7H5Q7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-A303A.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-8N6G4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MPKD8.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-QPJNH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-ILHNT.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AEHS0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-SVRQN.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\unins000.dat
- %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\Uninstall TunesKit Spotify Converter.lnk
- %HOMEPATH%\Desktop\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-DP6R4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-GKV2I.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-0L9LG.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-B0PKD.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-GDHV7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-A9JVF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-SDVBN.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-0LULJ.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EVQ9F.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S1VKQ.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-5EHTH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-2M9JH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6VT3N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-8QI4V.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-3J49P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-OV4U7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-G1M27.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-22729.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-MPFB2.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-SBJ2T.tmp
- %TEMP%\is-S1PTA.tmp\~ntzhkvs.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-51877.tmp
- %TEMP%\aut1.tmp
- %CommonProgramFiles%\~ntzhkvs.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-MN22O.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-ARJ4S.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-2QOI0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-9U3FK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-7EJ09.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-RJ9EH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-P9FKC.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-58C68.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-1DKJD.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-K0C8O.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-PI1E7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-QS813.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-1PO2U.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4NAB3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-L91L8.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-PL3JN.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-BV30Q.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-DPDBH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-14I4B.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-ADG3G.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-B5ST9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-0J00T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-MD9N6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-NHAOQ.tmp
Sets the 'hidden' attribute to the following files:
- %CommonProgramFiles%\~ntzhkvs.tmp
Deletes the following files:
- %CommonProgramFiles%\~ntzhkvs.tmp
- %TEMP%\is-S1PTA.tmp\~ntzhkvs.tmp
- %TEMP%\aut1.tmp
Moves the following files:
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-977PT.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-AAJ0H.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-A303A.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-GORQ1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DRVGB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-IHU7M.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-SJV5T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-KA8LU.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-7H5Q7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-MV89C.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-1EB0K.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-QS813.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9HGFJ.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-8N6G4.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MPKD8.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-0BR40.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LH014.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-0LULJ.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-DP6R4.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S1VKQ.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-SDVBN.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-QPJNH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-ILHNT.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AEHS0.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-SVRQN.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EVQ9F.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-J8JU9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-B0PKD.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MDUSK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-J9D6H.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-0L9LG.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-A9JVF.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-GDHV7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-GKV2I.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-3J49P.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_hot.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-22729.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_pushed.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-5EHTH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon_80.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-2M9JH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_bg.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-G1M27.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-DPDBH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_btn_convert.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-MPFB2.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_sep.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-OV4U7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\logo.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-8QI4V.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-9U3FK.tmp to %ProgramFiles%\TunesKit Spotify Converter\ConvertLibrary.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-7EJ09.tmp to %ProgramFiles%\TunesKit Spotify Converter\DuiLib.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-51877.tmp to %ProgramFiles%\TunesKit Spotify Converter\unins000.exe
- from %ProgramFiles%\TunesKit Spotify Converter\is-MN22O.tmp to %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-SBJ2T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\dialog.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-6VT3N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\frame.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-ARJ4S.tmp to %ProgramFiles%\TunesKit Spotify Converter\WinSparkle.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-2QOI0.tmp to %ProgramFiles%\TunesKit Spotify Converter\WebStream.dll
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-RJ9EH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-P9FKC.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-58C68.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\menu.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-1DKJD.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\scrollbar.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4NAB3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-PI1E7.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-K0C8O.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-1PO2U.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-L91L8.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_progress.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-BV30Q.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_icons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-ADG3G.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_default_cover.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-14I4B.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-PL3JN.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-B5ST9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_check.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-0J00T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_line.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-MD9N6.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_dragfiles.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-NHAOQ.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_bk.png
Network activity:
Connects to:
- 'tu###kit.com':80
- 'localhost':1040
TCP:
HTTP GET requests:
- http://www.tu###kit.com/spotify-converter-for-win/user-guide.html via tu###kit.com
UDP:
- DNS ASK www.tu###kit.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
Creates and executes the following:
- '%TEMP%\is-S1PTA.tmp\~ntzhkvs.tmp' /SL5="$100E2,1619986,134144,%CommonProgramFiles%\~ntzhkvs.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%CommonProgramFiles%\~ntzhkvs.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Executes the following:
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
