Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\E_MountLite_66] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\E_MountLite_66] 'ImagePath' = '%ALLUSERSPROFILE%\E_MountLite_66\E_MountLite_66.exe'
Creates the following services
- 'E_MountLite_66' %ALLUSERSPROFILE%\E_MountLite_66\E_MountLite_66.exe
Modifies file system
Creates the following files
- %TEMP%\is-gnklt.tmp\<File name>.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\unins000.dat
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-4r7jp.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\languages\is-2uq6d.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-72g3d.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-v521e.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-kinca.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-e093u.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-6evlt.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-82qs5.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-bgdfr.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-as9s1.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-sb0h5.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-mf18l.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-n60ap.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-1fiq2.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-iri7p.tmp
- %TEMP%\is-cg44v.tmp\_isetup\_iscrypt.dll
- %TEMP%\is-cg44v.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-cg44v.tmp\_isetup\_setup64.tmp
- %LOCALAPPDATA%\tiny cd dvd rewriter\is-qm1jk.tmp
- %ALLUSERSPROFILE%\e_mountlite_66\e_mountlite_66.exe
Deletes the following files
- %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
Moves the following files
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-iri7p.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\unins000.exe
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-1fiq2.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-n60ap.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\avutil-56.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-sb0h5.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libiconv-2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-as9s1.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libogg-0.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-qm1jk.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libvorbis-0.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-bgdfr.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libvorbisenc-2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-82qs5.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libwinpthread-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-6evlt.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\libbz2-1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-e093u.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\zlib1.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-kinca.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\swresample-3.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-v521e.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\sdl2.dll
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-72g3d.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\setting.ini
- from %LOCALAPPDATA%\tiny cd dvd rewriter\languages\is-2uq6d.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\languages\turkish.ini
- from %LOCALAPPDATA%\tiny cd dvd rewriter\is-4r7jp.tmp to %LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe
Substitutes the following files
- %LOCALAPPDATA%\tiny cd dvd rewriter\libgcc_s_dw2-1.dll
Miscellaneous
Searches for the following windows
- ClassName: 'j57109_Flash2171FixClass_j57109' WindowName: ''
Creates and executes the following
- '%TEMP%\is-gnklt.tmp\<File name>.tmp' /SL5="$A0274,2955024,54272,<Full path to file>"
- '%LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe' -i
- '%LOCALAPPDATA%\tiny cd dvd rewriter\tinydvdwriter.exe' -s
