Technical Information
To ensure autorun and distribution:
Changes the following executable system files:
- <SYSTEM32>\msxml6r.dll
- <SYSTEM32>\msxml6.dll
Modifies file system:
Creates the following files:
- <SYSTEM32>\MSMASK32.ocx
- <SYSTEM32>\msjro.dll
- <SYSTEM32>\MSWINSCK.ocx
- <SYSTEM32>\MSSTDFMT.dll
- <SYSTEM32>\MSINET.ocx
- <SYSTEM32>\MSCOMM32.ocx
- <SYSTEM32>\Mscomctl.ocx
- <SYSTEM32>\MSFLXGRD.ocx
- <SYSTEM32>\MSDATLST.ocx
- <SYSTEM32>\MSWORD.olb
- <SYSTEM32>\p2bxbse.dll
- <SYSTEM32>\p2bdao.dll
- <SYSTEM32>\p2irdao.dll
- <SYSTEM32>\p2ctdao.dll
- <SYSTEM32>\P2bbnd.dll
- <SYSTEM32>\NclMsg.dll
- <SYSTEM32>\MyApies.dll
- <SYSTEM32>\p2bbde.dll
- <SYSTEM32>\NclSet.dll
- <SYSTEM32>\Crpaig80.dll
- <SYSTEM32>\craxdrt.dll
- <SYSTEM32>\crtslv.dll
- <SYSTEM32>\crpe32.dll
- <SYSTEM32>\Comdlg32.ocx
- <SYSTEM32>\ASmsCtrl.dll
- <SYSTEM32>\adbc.dll
- <SYSTEM32>\COMCTL32.ocx
- <SYSTEM32>\COMCT332.ocx
- <SYSTEM32>\crxf_pdf.dll
- <SYSTEM32>\MSADODC.ocx
- <SYSTEM32>\MSACC.olb
- <SYSTEM32>\MSCOMCT2.ocx
- <SYSTEM32>\MSBIND.dll
- <SYSTEM32>\FreeImage.dll
- <SYSTEM32>\Crxlat32.dll
- <SYSTEM32>\crxf_rtf.dll
- <SYSTEM32>\ExportModeller.dll
- <SYSTEM32>\Emfgen.dll
- <SYSTEM32>\u2ftext.dll
- <SYSTEM32>\u2fsepv.dll
- <SYSTEM32>\u2fwordw.dll
- <SYSTEM32>\u2fwks.dll
- <SYSTEM32>\u2frtf.dll
- <SYSTEM32>\u2fhtml.dll
- <SYSTEM32>\u2fcr.dll
- <SYSTEM32>\u2frec.dll
- <SYSTEM32>\u2fodbc.dll
- <SYSTEM32>\u2fxls.dll
- <SYSTEM32>\cpeaut32.dll
- <SYSTEM32>\zlib.dll
- <SYSTEM32>\CBLCtlsU.ocx
- <SYSTEM32>\UniSuiteFree.ocx
- <SYSTEM32>\VB6STKIT.dll
- <SYSTEM32>\u2lcom.dll
- <SYSTEM32>\u2l2000.dll
- <SYSTEM32>\u2lsamp1.dll
- <SYSTEM32>\u2ldts.dll
- <SYSTEM32>\p2ssyb10.dll
- <SYSTEM32>\p2ssql.dll
- <SYSTEM32>\SentryDLL5.dll
- <SYSTEM32>\RICHTX32.ocx
- <SYSTEM32>\p2sora7.dll
- <SYSTEM32>\P2smon.dll
- <SYSTEM32>\p2sifmx.dll
- <SYSTEM32>\p2soledb.dll
- <SYSTEM32>\p2sodbc.dll
- <SYSTEM32>\Sentrynet.dll
- <SYSTEM32>\u2dnotes.dll
- <SYSTEM32>\u2dmapi.dll
- <SYSTEM32>\u2dvim.dll
- <SYSTEM32>\u2dpost.dll
- <SYSTEM32>\u2ddisk.dll
- <SYSTEM32>\u252000.dll
- <SYSTEM32>\TABCTL32.ocx
- <SYSTEM32>\u2dapp.dll
- <SYSTEM32>\u25dts.dll
- C:\ADDMEN\DesktopSMS.exe
- C:\ADDMEN\Sstree32.dll
- C:\ADDMEN\OMRv15.exe
- %HOMEPATH%\Desktop\Desktop SMS.lnk
- C:\ADDMEN\ssfavorites.dll
- C:\ADDMEN\sscdlg.dll
- C:\ADDMEN\s2sqlprs.dll
- C:\ADDMEN\sscsdk80.dll
- C:\ADDMEN\sscrc.dll
- %HOMEPATH%\Desktop\OMRv15.lnk
- C:\ADDMEN\RESOURCE\QPG 2-Column Format.doc
- C:\ADDMEN\RESOURCE\QPG 1-Column Format.doc
- C:\ADDMEN\RESOURCE\OMR PRO DB.sql
- C:\ADDMEN\RESOURCE\PowerPoint Template.potx
- C:\ADDMEN\RESOURCE\DBQBANK.mdb
- C:\ADDMEN\DATA\DBQBANK.mdb
- C:\ADDMEN\DATA\DBOMR12.mdb
- C:\ADDMEN\RESOURCE\CODB.mdb
- C:\ADDMEN\RESOURCE\DBOMR12.mdb
- C:\ADDMEN\sentrymsp.vxd
- C:\ADDMEN\SentrUsb.sys
- C:\ADDMEN\amzi4.dll
- C:\ADDMEN\tcps.exe
- C:\ADDMEN\Sentrusb.inf
- %TEMP%\spltmp.bmp
- %TEMP%\nsl2.tmp
- C:\ADDMEN\rdwiz.ini
- C:\ADDMEN\UninstallOMRv15.exe
- C:\ADDMEN\Cdo32.dll
- C:\ADDMEN\Olapdbmg.tlb
- C:\ADDMEN\Olapdbmg.dll
- C:\ADDMEN\rdwiz.dll
- C:\ADDMEN\pg32conv.dll
- C:\ADDMEN\msado25.tlb
- C:\ADDMEN\Implode.dll
- C:\ADDMEN\gdi+.tlb
- C:\ADDMEN\ltkrn11n.dll
- C:\ADDMEN\keycode.dll
- C:\ADDMEN\REPORTS\6MT5SCOMB.rpt
- C:\ADDMEN\REPORTS\6MT.rpt
- C:\ADDMEN\REPORTS\6PERFORMANCE.rpt
- C:\ADDMEN\REPORTS\6OPTRESPONSE.rpt
- C:\ADDMEN\REPORTS\6MOSTAPPCH.rpt
- C:\ADDMEN\REPORTS\6LETTER2SMRK.rpt
- C:\ADDMEN\REPORTS\6LETTER1SMRK.rpt
- C:\ADDMEN\REPORTS\6LETTER5SMRK.rpt
- C:\ADDMEN\REPORTS\6LETTER4SMRK.rpt
- C:\ADDMEN\REPORTS\6PFM.rpt
- %WINDIR%\Fonts\V100004_.TTF
- C:\ADDMEN\REPORTS\6TOPICWISE.rpt
- <SYSTEM32>\MSDATGRD.OCX
- %WINDIR%\Fonts\V100010_.TTF
- C:\ADDMEN\REPORTS\6STUDENT.rpt
- C:\ADDMEN\REPORTS\6PfmAllTest.rpt
- C:\ADDMEN\REPORTS\6PFMSUB1.rpt
- C:\ADDMEN\REPORTS\6SCORE.rpt
- C:\ADDMEN\REPORTS\6QUESTION_STATS.rpt
- C:\ADDMEN\REPORTS\61TALLS.rpt
- C:\ADDMEN\REPORTS\61T5SDETAIL.rpt
- C:\ADDMEN\REPORTS\62T3STESTWISE.rpt
- C:\ADDMEN\REPORTS\62T3SSUBWISE.rpt
- C:\ADDMEN\REPORTS\61T5S.rpt
- C:\ADDMEN\REPORTS\61T3S.rpt
- C:\ADDMEN\REPORTS\61T1S.rpt
- C:\ADDMEN\REPORTS\61T4SDETAIL.rpt
- C:\ADDMEN\REPORTS\61T4S.rpt
- C:\ADDMEN\REPORTS\6ABSENT.rpt
- C:\ADDMEN\REPORTS\6Indices_IND.rpt
- C:\ADDMEN\REPORTS\6CHART.rpt
- C:\ADDMEN\REPORTS\6Indices_IRCDAT.rpt
- C:\ADDMEN\REPORTS\6Indices_IRC.rpt
- C:\ADDMEN\REPORTS\6ANSWERKEY.rpt
- C:\ADDMEN\REPORTS\6ANALYSISDIFF.rpt
- C:\ADDMEN\REPORTS\6ANALYSIS.rpt
- C:\ADDMEN\REPORTS\6ANALYSISN.rpt
- C:\ADDMEN\REPORTS\6ANALYSISG.rpt
Deletes the following files:
- %TEMP%\spltmp.bmp
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: ''
