Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
Modifies file system
Creates the following files
- C:\instsnd\macsound\asterik.wav
- %WINDIR%\media\macsnd\set20a0.tmp
- %WINDIR%\media\macsnd\set2070.tmp
- %WINDIR%\media\macsnd\set205f.tmp
- %WINDIR%\media\macsnd\set203f.tmp
- %WINDIR%\media\macsnd\set202f.tmp
- %WINDIR%\media\macsnd\set200e.tmp
- %WINDIR%\media\macsnd\set1fee.tmp
- %WINDIR%\media\macsnd\set1fce.tmp
- %WINDIR%\media\macsnd\set1fbd.tmp
- %WINDIR%\media\macsnd\set1f9d.tmp
- %WINDIR%\media\macsnd\set1f7d.tmp
- %WINDIR%\media\macsnd\set1f5c.tmp
- %WINDIR%\media\macsnd\set1f4c.tmp
- %WINDIR%\media\macsnd\set1f2c.tmp
- %WINDIR%\media\macsnd\set1f0b.tmp
- %WINDIR%\media\macsnd\set1eeb.tmp
- %WINDIR%\media\macsnd\set1ecb.tmp
- %WINDIR%\media\macsnd\set20df.tmp
- %WINDIR%\media\macsnd\set2100.tmp
- %WINDIR%\media\macsnd\set2110.tmp
- %WINDIR%\media\macsnd\set2131.tmp
- %WINDIR%\media\macsnd\set2346.tmp
- %WINDIR%\media\macsnd\set2336.tmp
- %WINDIR%\media\macsnd\set2315.tmp
- %WINDIR%\media\macsnd\set22f5.tmp
- %WINDIR%\media\macsnd\set22d5.tmp
- %WINDIR%\media\macsnd\set22b5.tmp
- %WINDIR%\media\macsnd\set22a4.tmp
- %WINDIR%\media\macsnd\set2284.tmp
- %WINDIR%\media\macsnd\set2243.tmp
- %WINDIR%\media\macsnd\set2263.tmp
- %WINDIR%\media\macsnd\set2233.tmp
- %WINDIR%\media\macsnd\set2212.tmp
- %WINDIR%\media\macsnd\set21e2.tmp
- %WINDIR%\media\macsnd\set21c2.tmp
- %WINDIR%\media\macsnd\set21a2.tmp
- %WINDIR%\media\macsnd\set2191.tmp
- %WINDIR%\media\macsnd\set2171.tmp
- %WINDIR%\media\macsnd\set2151.tmp
- %WINDIR%\media\macsnd\set2366.tmp
- C:\instsnd\del.bat
- C:\instsnd\macsound\windows xp start.wav
- C:\instsnd\macsound\windows exit.wav
- C:\instsnd\macsound\macsound.inf
- C:\instsnd\macsound\low battery.wav
- C:\instsnd\macsound\logon.wav
- C:\instsnd\macsound\logoff.wav
- C:\instsnd\macsound\exit windows.wav
- C:\instsnd\macsound\exclamation.wav
- C:\instsnd\macsound\error.wav
- C:\instsnd\macsound\empty recycle.wav
- C:\instsnd\macsound\device failed.wav
- C:\instsnd\macsound\device disconnect.wav
- C:\instsnd\macsound\device connect.wav
- C:\instsnd\macsound\default beep.wav
- C:\instsnd\macsound\critical stop.wav
- C:\instsnd\macsound\critical battery.wav
- C:\instsnd\macsound\contact online.wav
- C:\instsnd\macsound\complete navigation.wav
- C:\instsnd\macsound\close.wav
- C:\instsnd\macsound\maximize.wav
- C:\instsnd\macsound\menu command.wav
- C:\instsnd\macsound\menu popup.wav
- C:\instsnd\macsound\minimize.wav
- C:\instsnd\macsound\start windows.wav
- C:\instsnd\macsound\start navigation.wav
- C:\instsnd\macsound\show toolbar.wav
- C:\instsnd\macsound\select.wav
- C:\instsnd\macsound\restore up.wav
- C:\instsnd\macsound\restore down.wav
- C:\instsnd\macsound\receive request.wav
- C:\instsnd\macsound\receive call.wav
- C:\instsnd\macsound\program error.wav
- C:\instsnd\macsound\question.wav
- C:\instsnd\macsound\print complete.wav
- C:\instsnd\macsound\person leave.wav
- C:\instsnd\macsound\person join.wav
- C:\instsnd\macsound\open.wav
- C:\instsnd\macsound\new messages.wav
- C:\instsnd\macsound\new mail.wav
- C:\instsnd\macsound\new alert.wav
- C:\instsnd\macsound\move menu.wav
- C:\instsnd\macsound\system notifi.wav
- %WINDIR%\inf\set2387.tmp
Moves the following files
- from %WINDIR%\media\macsnd\set1ecb.tmp to %WINDIR%\media\macsnd\asterik.wav
- from %WINDIR%\media\macsnd\set2171.tmp to %WINDIR%\media\macsnd\new alert.wav
- from %WINDIR%\media\macsnd\set2191.tmp to %WINDIR%\media\macsnd\new mail.wav
- from %WINDIR%\media\macsnd\set21a2.tmp to %WINDIR%\media\macsnd\new messages.wav
- from %WINDIR%\media\macsnd\set21c2.tmp to %WINDIR%\media\macsnd\open.wav
- from %WINDIR%\media\macsnd\set21e2.tmp to %WINDIR%\media\macsnd\person join.wav
- from %WINDIR%\media\macsnd\set2212.tmp to %WINDIR%\media\macsnd\person leave.wav
- from %WINDIR%\media\macsnd\set2233.tmp to %WINDIR%\media\macsnd\print complete.wav
- from %WINDIR%\media\macsnd\set2243.tmp to %WINDIR%\media\macsnd\program error.wav
- from %WINDIR%\media\macsnd\set2263.tmp to %WINDIR%\media\macsnd\question.wav
- from %WINDIR%\media\macsnd\set2284.tmp to %WINDIR%\media\macsnd\receive call.wav
- from %WINDIR%\media\macsnd\set22a4.tmp to %WINDIR%\media\macsnd\receive request.wav
- from %WINDIR%\media\macsnd\set22b5.tmp to %WINDIR%\media\macsnd\restore down.wav
- from %WINDIR%\media\macsnd\set22d5.tmp to %WINDIR%\media\macsnd\restore up.wav
- from %WINDIR%\media\macsnd\set22f5.tmp to %WINDIR%\media\macsnd\select.wav
- from %WINDIR%\media\macsnd\set2315.tmp to %WINDIR%\media\macsnd\show toolbar.wav
- from %WINDIR%\media\macsnd\set2336.tmp to %WINDIR%\media\macsnd\start navigation.wav
- from %WINDIR%\media\macsnd\set2346.tmp to %WINDIR%\media\macsnd\windows xp start.wav
- from %WINDIR%\media\macsnd\set2151.tmp to %WINDIR%\media\macsnd\move menu.wav
- from %WINDIR%\media\macsnd\set2366.tmp to %WINDIR%\media\macsnd\system notifi.wav
- from %WINDIR%\media\macsnd\set2131.tmp to %WINDIR%\media\macsnd\minimize.wav
- from %WINDIR%\media\macsnd\set2100.tmp to %WINDIR%\media\macsnd\menu command.wav
- from %WINDIR%\media\macsnd\set1eeb.tmp to %WINDIR%\media\macsnd\close.wav
- from %WINDIR%\media\macsnd\set1f0b.tmp to %WINDIR%\media\macsnd\complete navigation.wav
- from %WINDIR%\media\macsnd\set1f2c.tmp to %WINDIR%\media\macsnd\contact online.wav
- from %WINDIR%\media\macsnd\set1f4c.tmp to %WINDIR%\media\macsnd\critical battery.wav
- from %WINDIR%\media\macsnd\set1f5c.tmp to %WINDIR%\media\macsnd\critical stop.wav
- from %WINDIR%\media\macsnd\set1f7d.tmp to %WINDIR%\media\macsnd\default beep.wav
- from %WINDIR%\media\macsnd\set1f9d.tmp to %WINDIR%\media\macsnd\device connect.wav
- from %WINDIR%\media\macsnd\set1fbd.tmp to %WINDIR%\media\macsnd\device disconnect.wav
- from %WINDIR%\media\macsnd\set1fce.tmp to %WINDIR%\media\macsnd\device failed.wav
- from %WINDIR%\media\macsnd\set1fee.tmp to %WINDIR%\media\macsnd\empty recycle.wav
- from %WINDIR%\media\macsnd\set200e.tmp to %WINDIR%\media\macsnd\error.wav
- from %WINDIR%\media\macsnd\set202f.tmp to %WINDIR%\media\macsnd\exclamation.wav
- from %WINDIR%\media\macsnd\set203f.tmp to %WINDIR%\media\macsnd\windows exit.wav
- from %WINDIR%\media\macsnd\set205f.tmp to %WINDIR%\media\macsnd\logoff.wav
- from %WINDIR%\media\macsnd\set2070.tmp to %WINDIR%\media\macsnd\logon.wav
- from %WINDIR%\media\macsnd\set20a0.tmp to %WINDIR%\media\macsnd\low battery.wav
- from %WINDIR%\media\macsnd\set20df.tmp to %WINDIR%\media\macsnd\maximize.wav
- from %WINDIR%\media\macsnd\set2110.tmp to %WINDIR%\media\macsnd\menu popup.wav
- from %WINDIR%\inf\set2387.tmp to %WINDIR%\inf\macsound.inf
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
Executes the following
- '%WINDIR%\syswow64\cmd.exe' /Q /C RUNDLL32.EXE SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\instsnd\MACSound\MACSound.inf
- '%WINDIR%\syswow64\rundll32.exe' SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\instsnd\MACSound\MACSound.inf
- '%WINDIR%\syswow64\runonce.exe' -r
- '%WINDIR%\syswow64\grpconv.exe' -o
