Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\E_MountLite_65] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\E_MountLite_65] 'ImagePath' = '%ALLUSERSPROFILE%\E_MountLite_65\E_MountLite_65.exe'
Creates the following services
- 'E_MountLite_65' %ALLUSERSPROFILE%\E_MountLite_65\E_MountLite_65.exe
Modifies file system
Creates the following files
- %TEMP%\is-4up0v.tmp\<File name>.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\unins000.dat
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-hv70g.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\languages\is-t49ec.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-1vehj.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-ngu83.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-klcv1.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-p5ht2.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-jo2an.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-a3ik3.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-4qa2r.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-5sabo.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-09ahn.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-cq7q5.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-eqoa3.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-8lhsu.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-m9ps5.tmp
- %TEMP%\is-snrn8.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-snrn8.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-snrn8.tmp\_isetup\_setup64.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-hdc37.tmp
- %ALLUSERSPROFILE%\e_mountlite_65\e_mountlite_65.exe
Deletes the following files
- %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
Moves the following files
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-m9ps5.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\unins000.exe
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-8lhsu.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-eqoa3.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\avutil-56.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-09ahn.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libiconv-2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-5sabo.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libogg-0.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-hdc37.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libvorbis-0.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-4qa2r.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libvorbisenc-2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-a3ik3.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libwinpthread-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-jo2an.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libbz2-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-p5ht2.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\zlib1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-klcv1.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\swresample-3.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-ngu83.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\sdl2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-1vehj.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\setting.ini
- from %LOCALAPPDATA%\tiny cd dvd rewriter\languages\is-t49ec.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\languages\turkish.ini
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-hv70g.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe
Substitutes the following files
- %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
Miscellaneous
Searches for the following windows
- ClassName: 'P9e0e9_Flash2171FixClass_P9e0e9' WindowName: ''
Creates and executes the following
- '%TEMP%\is-4up0v.tmp\<File name>.tmp' /SL5="$6023C,2960420,54272,<Full path to file>"
- '%LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe' -i
- '%LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe' -s
