Technical Information
- [<HKLM>\Software\Classes\PROTOCOLS\Handler\vnd.ms.radio] 'CLSID' = '{3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020}'
- [<HKLM>\Software\Classes\vnd.ms.radio\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\mplayer2.exe" "%L"'
- %TEMP%\is-4r326.tmp\<File name>.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-07ub0.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-ne2m7.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-3dgji.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-8rn0f.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-iq347.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-hi478.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-5387n.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-bet07.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-tlga0.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-3bi76.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-6nama.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-qank8.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-j0t54.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-jsp1o.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-vpdq4.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-7gc29.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-jvria.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-3ca6m.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-ei11s.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-kgvk2.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-j9u2a.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-uoq9p.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-o63gb.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-905nd.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-k6tpt.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-05v2o.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-8nps8.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\aurora media workshop\aurora media workshop.lnk
- %ProgramFiles(x86)%\aurora media workshop\nscompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-5eij7.tmp
- %ProgramFiles(x86)%\aurora media workshop\amcompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-j8hj3.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-2iv9k.tmp
- %TEMP%\is-cevk5.tmp\_isetup\_setup64.tmp
- %TEMP%\is-cevk5.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\aurora media workshop\is-hjmc1.tmp
- %WINDIR%\syswow64\is-ctl8l.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-3ophv.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-5h83o.tmp
- %ProgramFiles(x86)%\aurora media workshop\skin\is-camcu.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-tu1c6.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-cshuj.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-u8d9t.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-1r8eo.tmp
- %WINDIR%\syswow64\is-m3k45.tmp
- %WINDIR%\syswow64\is-s5a1g.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-fv9fd.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-vs7t6.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-t4ebb.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-vju0d.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-uo1gv.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-8d580.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-p5qgf.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-r9q53.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-gravb.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-d242v.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-lo2ma.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-1j8t9.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-mchvb.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-r8p5r.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-uf6jk.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-f30qo.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-0m8cb.tmp
- %ProgramFiles(x86)%\aurora media workshop\unins000.dat
- from %ProgramFiles(x86)%\aurora media workshop\is-hjmc1.tmp to %ProgramFiles(x86)%\aurora media workshop\unins000.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-ne2m7.tmp to %ProgramFiles(x86)%\aurora media workshop\cdrip.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-3dgji.tmp to %ProgramFiles(x86)%\aurora media workshop\vcdimager.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-8rn0f.tmp to %ProgramFiles(x86)%\aurora media workshop\wmaudsdk.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-iq347.tmp to %ProgramFiles(x86)%\aurora media workshop\libsnd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-hi478.tmp to %ProgramFiles(x86)%\aurora media workshop\mp3lib.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-5387n.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcrt.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-bet07.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr70.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-tlga0.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr71.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-3bi76.tmp to %ProgramFiles(x86)%\aurora media workshop\wmvprofileeditor.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-6nama.tmp to %ProgramFiles(x86)%\aurora media workshop\aspisetup.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-qank8.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\apix.vxd
- from %ProgramFiles(x86)%\aurora media workshop\is-vju0d.tmp to %ProgramFiles(x86)%\aurora media workshop\support.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-j0t54.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\aspienum.vxd
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-vpdq4.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-7gc29.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-jvria.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-3ca6m.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-ei11s.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winnt.reg
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-kgvk2.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-j9u2a.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-uoq9p.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-o63gb.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\frcaspi.txt
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-905nd.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-k6tpt.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-5eij7.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomimage.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-07ub0.tmp to %ProgramFiles(x86)%\aurora media workshop\vorbis.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-j8hj3.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiovisualization2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-0m8cb.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiorecord2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-2iv9k.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudioplayer2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-3ophv.tmp to %ProgramFiles(x86)%\aurora media workshop\wmfdist.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-5h83o.tmp to %ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe
- from %ProgramFiles(x86)%\aurora media workshop\skin\is-camcu.tmp to %ProgramFiles(x86)%\aurora media workshop\skin\winaqua.smf
- from %ProgramFiles(x86)%\aurora media workshop\is-tu1c6.tmp to %ProgramFiles(x86)%\aurora media workshop\videoedit.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-cshuj.tmp to %ProgramFiles(x86)%\aurora media workshop\mpeg2dmx.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-u8d9t.tmp to %ProgramFiles(x86)%\aurora media workshop\mpgdec.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-1r8eo.tmp to %ProgramFiles(x86)%\aurora media workshop\skinmagic.dll
- from %WINDIR%\syswow64\is-m3k45.tmp to %WINDIR%\syswow64\gdiplus.dll
- from %WINDIR%\syswow64\is-s5a1g.tmp to %WINDIR%\syswow64\smd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-fv9fd.tmp to %ProgramFiles(x86)%\aurora media workshop\libmpg-1.0.2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-vs7t6.tmp to %ProgramFiles(x86)%\aurora media workshop\libmcl-4.5.0.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-05v2o.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-jsp1o.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\win9x.reg
- from %ProgramFiles(x86)%\aurora media workshop\is-t4ebb.tmp to %ProgramFiles(x86)%\aurora media workshop\foxburner.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-8d580.tmp to %ProgramFiles(x86)%\aurora media workshop\msdxm.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-p5qgf.tmp to %ProgramFiles(x86)%\aurora media workshop\directencode.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-r9q53.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomwave.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-gravb.tmp to %ProgramFiles(x86)%\aurora media workshop\lame_enc.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-d242v.tmp to %ProgramFiles(x86)%\aurora media workshop\help.chm
- from %ProgramFiles(x86)%\aurora media workshop\is-lo2ma.tmp to %ProgramFiles(x86)%\aurora media workshop\tips.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-1j8t9.tmp to %ProgramFiles(x86)%\aurora media workshop\license.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-mchvb.tmp to %ProgramFiles(x86)%\aurora media workshop\readme.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-r8p5r.tmp to %ProgramFiles(x86)%\aurora media workshop\homepage.url
- from %ProgramFiles(x86)%\aurora media workshop\is-uf6jk.tmp to %ProgramFiles(x86)%\aurora media workshop\buynow.url
- from %ProgramFiles(x86)%\aurora media workshop\is-f30qo.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiofile2.dll
- from %WINDIR%\syswow64\is-ctl8l.tmp to %WINDIR%\syswow64\atl.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-uo1gv.tmp to %ProgramFiles(x86)%\aurora media workshop\setup.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-8nps8.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\installaspi.bat
- 'op###olad.com':80
- http://op###olad.com/v2/events
- DNS ASK op###olad.com
- ClassName: 'nuewduwbfbeuibewbf' WindowName: ''
- '%TEMP%\is-4r326.tmp\<File name>.tmp' /SL5="$A0220,13758077,215040,<Full path to file>"
- '%ProgramFiles(x86)%\aurora media workshop\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe' <File name>.exe
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\VideoEdit.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpeg2dmx.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpgdec.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\msdxm.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\DirectEncode.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\viscomwave.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioFile2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioPlayer2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioRecord2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioVisualization2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\WMVProfileEditor.ocx"