Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\PDiskSnap74] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\PDiskSnap74] 'ImagePath' = '%ALLUSERSPROFILE%\PDiskSnap74\PDiskSnap74.exe'
Creates the following services
- 'PDiskSnap74' %ALLUSERSPROFILE%\PDiskSnap74\PDiskSnap74.exe
Modifies file system
Creates the following files
- %TEMP%\is-i1igh.tmp\<File name>.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-c6tno.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vc4iv.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pgik7.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-orror.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a4074.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-8qg2r.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-uc7im.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-nods3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-9p9eb.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ms7ps.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vse4r.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-6duhr.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\is-hmc24.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-tc0vq.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-q68he.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-6kgrs.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bdfb8.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-85o0c.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-cosj8.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-2apvt.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vll6e.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-dheba.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-k49p0.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-27f7m.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-l204e.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-dn8kd.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-5sv5f.tmp
- %ProgramFiles(x86)%\splitcontrolvb\is-gbk11.tmp
- %ProgramFiles(x86)%\splitcontrolvb\unins000.dat
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-q69ac.tmp
- %ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bkqmo.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-1ntvf.tmp
- %TEMP%\is-d6mff.tmp\_isetup\_regdll.tmp
- %TEMP%\is-d6mff.tmp\_isetup\_setup64.tmp
- %TEMP%\is-d6mff.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-d6mff.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-d6mff.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\splitcontrolvb\is-b9209.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-s668l.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-oaonp.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-1detj.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ko6ts.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-jbkfi.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bpbpa.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rma07.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rupi1.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-cn9nc.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0cef9.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-70hp4.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vj45h.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0phbq.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-3phkf.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vaie1.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-parl3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-djbsk.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-odfnj.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5r88n.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ha5hf.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-u2ctj.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-o82re.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5cdmt.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-25p6f.tmp
- %ALLUSERSPROFILE%\pdisksnap74\pdisksnap74.exe
Deletes the following files
- %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
Moves the following files
- from %ProgramFiles(x86)%\splitcontrolvb\is-b9209.tmp to %ProgramFiles(x86)%\splitcontrolvb\unins000.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pgik7.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libdtsdec.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-orror.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dsd2.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a4074.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libvorbis.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-8qg2r.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\sqlite3.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-uc7im.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lame_enc.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-nods3.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\da.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-9p9eb.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\daiso.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ms7ps.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dstt.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vse4r.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dsd2pcmt.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-6duhr.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\pcm2dsd.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0phbq.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassmidi.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\is-hmc24.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\lessmsi-v1.6.91.zip
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-q68he.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libwebp.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-6kgrs.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libwinpthread-1.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bdfb8.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\sd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-85o0c.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\peak_scanner_plugin_c.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-cosj8.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\raw_decode_plugin_c.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-2apvt.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\copying
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vll6e.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\7z.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-dheba.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\takdec.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-k49p0.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\tak_deco_lib.dll
- from %ProgramFiles(x86)%\splitcontrolvb\stuff\is-27f7m.tmp to %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-c6tno.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\uchardet.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vc4iv.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\utils.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-q69ac.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libsox-3.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bkqmo.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libsoxr.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-25p6f.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\wavpackdll.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-oaonp.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_aac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-1detj.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassalac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ko6ts.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassape.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-jbkfi.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassdsd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-bpbpa.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basscd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rma07.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassflac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rupi1.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassmix.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-cn9nc.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassopus.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0cef9.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basswma.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-70hp4.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basswv.dll
- from %ProgramFiles(x86)%\splitcontrolvb\stuff\is-l204e.tmp to %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-tc0vq.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\d_writer.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vj45h.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_fx.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-vaie1.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\copying.lgplv2.1
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-parl3.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\ff_helper.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-djbsk.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\gain_analysis.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-odfnj.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libflac_dynamic.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5r88n.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libmp4v2.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ha5hf.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\opusenc.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-u2ctj.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_ofr.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-o82re.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\optimfrog.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5cdmt.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\mp3gain.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-1ntvf.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\rg_ebur128.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-s668l.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-3phkf.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_tta.dll
- from %ProgramFiles(x86)%\splitcontrolvb\is-gbk11.tmp to %ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe
Substitutes the following files
- %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
Miscellaneous
Searches for the following windows
- ClassName: '' WindowName: 'b41b75_SCVB12203FlashFixClass_b41b75'
Creates and executes the following
- '%TEMP%\is-i1igh.tmp\<File name>.tmp' /SL5="$C0186,8617617,54272,<Full path to file>"
- '%ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe' -i
- '%ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe' -s
Executes the following
- '%WINDIR%\syswow64\net.exe' helpmsg 20
- '%WINDIR%\syswow64\net1.exe' helpmsg 20
