Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\PDiskSnap71] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\PDiskSnap71] 'ImagePath' = '%ALLUSERSPROFILE%\PDiskSnap71\PDiskSnap71.exe'
Creates the following services
- 'PDiskSnap71' %ALLUSERSPROFILE%\PDiskSnap71\PDiskSnap71.exe
Modifies file system
Creates the following files
- %TEMP%\is-ovi2m.tmp\<File name>.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-qqn25.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5p13o.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ineo0.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-e63qe.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-v59ou.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-d8uck.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-o4vna.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-aihm0.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rebtn.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a7pbi.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ttnl1.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-k9uph.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\is-0soq9.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-jpihb.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-kuh4r.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a887n.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-lmpsb.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-s3h2m.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-fu7uj.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pfgnd.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0lklm.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-od8ob.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-hjmtv.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-25mj9.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-npos1.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-o6vv3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\stuff\is-6km2n.tmp
- %ProgramFiles(x86)%\splitcontrolvb\is-nf9q3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\unins000.dat
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-mu7o3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-cld7b.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-e4ojl.tmp
- %TEMP%\is-mq7qa.tmp\_isetup\_regdll.tmp
- %TEMP%\is-mq7qa.tmp\_isetup\_setup64.tmp
- %TEMP%\is-mq7qa.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-mq7qa.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-mq7qa.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\splitcontrolvb\is-bp106.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-uv2ot.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5t6so.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-j3bp7.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-n0tlr.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-04uc7.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rpe0b.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0e0q4.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-9ou59.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0llgc.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-7v982.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-npevn.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-no2s7.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-da2a3.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l7jbl.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-thk0o.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-n8oce.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-fvri5.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-gnm6t.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l4p80.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pl5bl.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-nnql9.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-no8pi.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-3m9k6.tmp
- %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l91k7.tmp
- %ALLUSERSPROFILE%\pdisksnap71\pdisksnap71.exe
Deletes the following files
- %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
Moves the following files
- from %ProgramFiles(x86)%\splitcontrolvb\is-bp106.tmp to %ProgramFiles(x86)%\splitcontrolvb\unins000.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ineo0.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libdtsdec.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-e63qe.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dsd2.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-v59ou.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libvorbis.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-d8uck.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\sqlite3.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-o4vna.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lame_enc.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-aihm0.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\da.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rebtn.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\daiso.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a7pbi.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dstt.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-ttnl1.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\dsd2pcmt.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-k9uph.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\pcm2dsd.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-da2a3.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassmidi.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\is-0soq9.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\lessmsi\lessmsi-v1.6.91.zip
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-kuh4r.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libwebp.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-a887n.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libwinpthread-1.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-lmpsb.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\sd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-s3h2m.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\peak_scanner_plugin_c.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\is-fu7uj.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\plugins\internal\raw_decode_plugin_c.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pfgnd.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\copying
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0lklm.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\7z.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-od8ob.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\takdec.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-hjmtv.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\tak_deco_lib.dll
- from %ProgramFiles(x86)%\splitcontrolvb\stuff\is-25mj9.tmp to %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-qqn25.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\uchardet.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5p13o.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\utils.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-mu7o3.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libsox-3.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-cld7b.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libsoxr.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l91k7.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\wavpackdll.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-5t6so.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_aac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-j3bp7.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassalac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-n0tlr.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassape.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-04uc7.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassdsd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-rpe0b.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basscd.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0e0q4.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassflac.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-9ou59.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassmix.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-0llgc.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bassopus.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-7v982.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basswma.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-npevn.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\basswv.dll
- from %ProgramFiles(x86)%\splitcontrolvb\stuff\is-npos1.tmp to %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-jpihb.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\d_writer.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-no2s7.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_fx.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-thk0o.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\copying.lgplv2.1
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-n8oce.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\ff_helper.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-fvri5.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\gain_analysis.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-gnm6t.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libflac_dynamic.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l4p80.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\libmp4v2.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-pl5bl.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\opusenc.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-nnql9.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_ofr.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-no8pi.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\optimfrog.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-3m9k6.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\mp3gain.exe
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-e4ojl.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\rg_ebur128.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-uv2ot.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass.dll
- from %ProgramFiles(x86)%\splitcontrolvb\bin\x86\is-l7jbl.tmp to %ProgramFiles(x86)%\splitcontrolvb\bin\x86\bass_tta.dll
- from %ProgramFiles(x86)%\splitcontrolvb\is-nf9q3.tmp to %ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe
Substitutes the following files
- %ProgramFiles(x86)%\splitcontrolvb\stuff\date.txt
- %ProgramFiles(x86)%\splitcontrolvb\stuff\tagsreplace.txt
Miscellaneous
Searches for the following windows
- ClassName: '' WindowName: 'f7db85_SCVB12203FlashFixClass_f7db85'
Creates and executes the following
- '%TEMP%\is-ovi2m.tmp\<File name>.tmp' /SL5="$D0178,8734938,54272,<Full path to file>"
- '%ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe' -i
- '%ProgramFiles(x86)%\splitcontrolvb\splitcontrolvb.exe' -s
Executes the following
- '%WINDIR%\syswow64\net.exe' helpmsg 20
- '%WINDIR%\syswow64\net1.exe' helpmsg 20
