Trojan.DownLoader36.22396

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-7qu0a.tmp\<File name>.tmp
%ProgramFiles(x86)%\cd mp3 burner\cmb.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\cd mp3 burner\cd mp3 burner.lnk
%ProgramFiles(x86)%\cd mp3 burner\is-s26ci.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-kql6h.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-91akc.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-m3sh6.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-ofa6d.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-7ksmm.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-gsp06.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-gjjsu.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-sa4si.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-ibgm4.tmp
%ProgramFiles(x86)%\cd mp3 burner\purchase.url
%ProgramFiles(x86)%\cd mp3 burner\is-pka5g.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-f4um9.tmp
%WINDIR%\syswow64\is-ntnj2.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-vandf.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-jtd2d.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-22cer.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-3jjvp.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-k6vld.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-coggj.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-6k9lf.tmp
%TEMP%\is-gamig.tmp\_isetup\_iscrypt.dll
%TEMP%\is-gamig.tmp\_isetup\_shfoldr.dll
%TEMP%\is-gamig.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\cd mp3 burner\is-i19ak.tmp
%ProgramFiles(x86)%\cd mp3 burner\unins000.dat

Moves the following files

from %ProgramFiles(x86)%\cd mp3 burner\is-6k9lf.tmp to %ProgramFiles(x86)%\cd mp3 burner\unins000.exe
from %ProgramFiles(x86)%\cd mp3 burner\is-91akc.tmp to %ProgramFiles(x86)%\cd mp3 burner\mp4tag.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-m3sh6.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_ac3.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-ofa6d.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_tta.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-7ksmm.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_spx.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-gsp06.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_wv.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-gjjsu.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_ofr.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-sa4si.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_mpc.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-ibgm4.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_ape.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-kql6h.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_alac.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-pka5g.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass_aac.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-f4um9.tmp to %ProgramFiles(x86)%\cd mp3 burner\optimfrog.dll
from %WINDIR%\syswow64\is-ntnj2.tmp to %WINDIR%\syswow64\nmsdvdxu.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-vandf.tmp to %ProgramFiles(x86)%\cd mp3 burner\bass.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-jtd2d.tmp to %ProgramFiles(x86)%\cd mp3 burner\basscd.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-22cer.tmp to %ProgramFiles(x86)%\cd mp3 burner\basswma.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-3jjvp.tmp to %ProgramFiles(x86)%\cd mp3 burner\cmb.chm
from %ProgramFiles(x86)%\cd mp3 burner\is-k6vld.tmp to %ProgramFiles(x86)%\cd mp3 burner\cmb.exe.manifest
from %ProgramFiles(x86)%\cd mp3 burner\is-coggj.tmp to %ProgramFiles(x86)%\cd mp3 burner\cmb.exe
from %ProgramFiles(x86)%\cd mp3 burner\is-i19ak.tmp to %ProgramFiles(x86)%\cd mp3 burner\bassflac.dll
from %ProgramFiles(x86)%\cd mp3 burner\is-s26ci.tmp to %ProgramFiles(x86)%\cd mp3 burner\sqlite3.dll