Technical Information
To ensure autorun and distribution:
Creates the following services:
- [<HKLM>\SYSTEM\ControlSet001\Services\PanasonicPCCheck] 'ImagePath' = '%TEMP%\{96C9DE9A-30E5-4A72-ADA8-E3C9535A36EF}\VMISCD.SYS'
Modifies file system:
Creates the following files:
- %TEMP%\ext2.tmp
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\isrt94b4.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\valu9456.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\lice93e9.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\VMIS93ca.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\vmis93ab.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\MEIP937c.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\setu92ff.rra
- %CommonProgramFiles%\InstallShield\IScript\iscr8dbf.rra
- %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iuse8c38.rra
- %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\obje8bea.rra
- %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor8a92.rra
- %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\core8a35.rra
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\defa9502.rra
- %TEMP%\86ca.rra
- %TEMP%\IEU5.tmp
- %TEMP%\IEC4.tmp
- %TEMP%\pft3~tmp\Disk1\setup.inx
- %TEMP%\pft3~tmp\Disk1\Setup.ini
- %TEMP%\pft3~tmp\Disk1\Setup.exe
- %TEMP%\pft3~tmp\Disk1\layout.bin
- %TEMP%\pft3~tmp\Disk1\ikernel.ex_
- %TEMP%\pft3~tmp\Disk1\data2.cab
- %TEMP%\pft3~tmp\Disk1\data1.hdr
- %TEMP%\pft3~tmp\Disk1\data1.cab
- %TEMP%\pft3~tmp\pftw1.pkg
- %TEMP%\plf1.tmp
- %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe
- %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\_IsR9560.rra
Deletes the following files:
- %TEMP%\ext2.tmp
- %TEMP%\pft3~tmp\pftw1.pkg
- %TEMP%\IEC4.tmp
- %TEMP%\IEU5.tmp
Moves the following files:
- from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\core8a35.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\corecomp.ini
- from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor8a92.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor.dll
- from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\obje8bea.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\objectps.dll
- from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iuse8c38.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iuser.dll
- from %CommonProgramFiles%\InstallShield\IScript\iscr8dbf.rra to %CommonProgramFiles%\InstallShield\IScript\iscript.dll
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\setu92ff.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\setup.inx
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\MEIP937c.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\MEIPCCHK.DLL
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\vmis93ab.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\vmiscd.sys
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\VMIS93ca.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\VMISCD.VXD
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\lice93e9.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\license.txt
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\valu9456.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\value.shl
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\isrt94b4.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\isrt.dll
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\defa9502.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\default.pal
- from %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\_IsR9560.rra to %TEMP%\{96c9de9a-30e5-4a72-ada8-e3c9535a36ef}\_IsRes.dll
Miscellaneous:
Creates and executes the following:
- '%TEMP%\pft3~tmp\Disk1\Setup.exe'
- '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' -RegServer
- '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' 32\IKernel.exe -Embedding
- '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' /REGSERVER
