Technical Information
To ensure autorun and distribution
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\TVTunerClassic66] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\TVTunerClassic66] 'ImagePath' = '%ALLUSERSPROFILE%\TVTunerClassic66\TVTunerClassic66.exe'
Creates the following services
- 'TVTunerClassic66' %ALLUSERSPROFILE%\TVTunerClassic66\TVTunerClassic66.exe
Modifies file system
Creates the following files
- %TEMP%\is-dl23t.tmp\<File name>.tmp
- %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-q02fo.tmp
- %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-4psrs.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-omels.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-gjla0.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-i829v.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-7t6i2.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-72k3p.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-mppal.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-sg2k9.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-mr58l.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-c8v3m.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-5r7l3.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-3auve.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-uqqjc.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-dton1.tmp
- %ALLUSERSPROFILE%\resource-a.dat
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-pr9g5.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-25p9v.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-7groa.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-1eh28.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-ecgv7.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-s6387.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-ho4ei.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-3efcf.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-0h6pb.tmp
- %LOCALAPPDATA%\xplay standard library\is-kt7ds.tmp
- %LOCALAPPDATA%\xplay standard library\unins000.dat
- %LOCALAPPDATA%\xplay standard library\xplaystdlib.exe
- %ALLUSERSPROFILE%\tvtunerclassic66\tvtunerclassic66.exe
- %ALLUSERSPROFILE%\ts66.dat
- %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-tv19c.tmp
- %LOCALAPPDATA%\xplay standard library\pf\common audio\is-rofo9.tmp
- %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-rteb4.tmp
- %LOCALAPPDATA%\xplay standard library\is-f43bf.tmp
- %TEMP%\is-nb4uf.tmp\_isetup\_regdll.tmp
- %TEMP%\is-nb4uf.tmp\_isetup\_setup64.tmp
- %TEMP%\is-nb4uf.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-nb4uf.tmp\_isetup\_iscrypt.dll
- %LOCALAPPDATA%\xplay standard library\is-95han.tmp
- %LOCALAPPDATA%\xplay standard library\is-835q9.tmp
- %LOCALAPPDATA%\xplay standard library\is-ci539.tmp
- %LOCALAPPDATA%\xplay standard library\is-s65oh.tmp
- %LOCALAPPDATA%\xplay standard library\is-p86c1.tmp
- %LOCALAPPDATA%\xplay standard library\is-fp3rq.tmp
- %LOCALAPPDATA%\xplay standard library\is-763hv.tmp
- %LOCALAPPDATA%\xplay standard library\is-5g74v.tmp
- %LOCALAPPDATA%\xplay standard library\is-osqp9.tmp
- %LOCALAPPDATA%\xplay standard library\is-frd93.tmp
- %LOCALAPPDATA%\xplay standard library\is-appni.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-ogo8r.tmp
- %LOCALAPPDATA%\xplay standard library\is-u1pl8.tmp
- %LOCALAPPDATA%\xplay standard library\is-fshfu.tmp
- %LOCALAPPDATA%\xplay standard library\is-3e9ki.tmp
- %LOCALAPPDATA%\xplay standard library\is-taf81.tmp
- %LOCALAPPDATA%\xplay standard library\is-4cjml.tmp
- %LOCALAPPDATA%\xplay standard library\is-dms20.tmp
- %LOCALAPPDATA%\xplay standard library\is-ii860.tmp
- %LOCALAPPDATA%\xplay standard library\is-rmoi5.tmp
- %LOCALAPPDATA%\xplay standard library\is-dnl89.tmp
- %LOCALAPPDATA%\xplay standard library\is-lh2l4.tmp
- %LOCALAPPDATA%\xplay standard library\is-0v3cg.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-pf3lm.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-5cs8r.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-8jj2v.tmp
- %LOCALAPPDATA%\xplay standard library\lang\is-hnpmb.tmp
- %ALLUSERSPROFILE%\resource-b.dat
Deletes the following files
- %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.dat
- %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.txt
- %LOCALAPPDATA%\xplay standard library\lang\feedback.dat
- %LOCALAPPDATA%\xplay standard library\lang\musictype.txt
- %LOCALAPPDATA%\xplay standard library\lang\update.log
Moves the following files
- from %LOCALAPPDATA%\xplay standard library\is-95han.tmp to %LOCALAPPDATA%\xplay standard library\unins000.exe
- from %LOCALAPPDATA%\xplay standard library\lang\is-hnpmb.tmp to %LOCALAPPDATA%\xplay standard library\lang\update.log
- from %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-rteb4.tmp to %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\microsoft.vc90.crt.manifest
- from %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-tv19c.tmp to %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\msvcm90.dll
- from %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-q02fo.tmp to %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\msvcp90.dll
- from %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\is-4psrs.tmp to %LOCALAPPDATA%\xplay standard library\microsoft.vc90.crt\msvcr90.dll
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-omels.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\aac.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-gjla0.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\ac3.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-i829v.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\aiff.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-7t6i2.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\amr.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-72k3p.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\ape.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-sg2k9.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\flac.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-1eh28.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\wma.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-mr58l.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\m4a.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-c8v3m.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\m4b.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-5r7l3.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\m4r.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-3auve.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\mka.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-uqqjc.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\mp2.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-rofo9.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\mp3.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-dton1.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\ogg.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-pr9g5.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\ra.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-25p9v.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\voc.pf
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-7groa.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\wav.pf
- from %LOCALAPPDATA%\xplay standard library\lang\is-ogo8r.tmp to %LOCALAPPDATA%\xplay standard library\lang\musictype.txt
- from %LOCALAPPDATA%\xplay standard library\pf\common audio\is-mppal.tmp to %LOCALAPPDATA%\xplay standard library\pf\common audio\au.pf
- from %LOCALAPPDATA%\xplay standard library\lang\is-8jj2v.tmp to %LOCALAPPDATA%\xplay standard library\lang\feedback.dat
- from %LOCALAPPDATA%\xplay standard library\is-appni.tmp to %LOCALAPPDATA%\xplay standard library\rmvbencode.dll
- from %LOCALAPPDATA%\xplay standard library\is-835q9.tmp to %LOCALAPPDATA%\xplay standard library\msvcp60.dll
- from %LOCALAPPDATA%\xplay standard library\is-ci539.tmp to %LOCALAPPDATA%\xplay standard library\msvcr71.dll
- from %LOCALAPPDATA%\xplay standard library\is-s65oh.tmp to %LOCALAPPDATA%\xplay standard library\musiccd.exe
- from %LOCALAPPDATA%\xplay standard library\is-p86c1.tmp to %LOCALAPPDATA%\xplay standard library\nvencoderkernel.dll
- from %LOCALAPPDATA%\xplay standard library\is-fp3rq.tmp to %LOCALAPPDATA%\xplay standard library\ocxhelper.exe
- from %LOCALAPPDATA%\xplay standard library\is-763hv.tmp to %LOCALAPPDATA%\xplay standard library\postproc-52.dll
- from %LOCALAPPDATA%\xplay standard library\is-5g74v.tmp to %LOCALAPPDATA%\xplay standard library\productcontrol.dll
- from %LOCALAPPDATA%\xplay standard library\is-osqp9.tmp to %LOCALAPPDATA%\xplay standard library\pthreadgc2.dll
- from %LOCALAPPDATA%\xplay standard library\is-frd93.tmp to %LOCALAPPDATA%\xplay standard library\pthreadvc2.dll
- from %LOCALAPPDATA%\xplay standard library\is-f43bf.tmp to %LOCALAPPDATA%\xplay standard library\realquickjoin.dll
- from %LOCALAPPDATA%\xplay standard library\is-u1pl8.tmp to %LOCALAPPDATA%\xplay standard library\rmvbencodesync.dll
- from %LOCALAPPDATA%\xplay standard library\lang\is-pf3lm.tmp to %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.dat
- from %LOCALAPPDATA%\xplay standard library\is-fshfu.tmp to %LOCALAPPDATA%\xplay standard library\simage.dll
- from %LOCALAPPDATA%\xplay standard library\is-3e9ki.tmp to %LOCALAPPDATA%\xplay standard library\soundtouch.dll
- from %LOCALAPPDATA%\xplay standard library\is-taf81.tmp to %LOCALAPPDATA%\xplay standard library\ssleay32.dll
- from %LOCALAPPDATA%\xplay standard library\is-4cjml.tmp to %LOCALAPPDATA%\xplay standard library\swresample-0.dll
- from %LOCALAPPDATA%\xplay standard library\is-dms20.tmp to %LOCALAPPDATA%\xplay standard library\uitoolkit.dll.intermediate.manifest
- from %LOCALAPPDATA%\xplay standard library\is-ii860.tmp to %LOCALAPPDATA%\xplay standard library\ve32.dll
- from %LOCALAPPDATA%\xplay standard library\is-rmoi5.tmp to %LOCALAPPDATA%\xplay standard library\ve64.dll
- from %LOCALAPPDATA%\xplay standard library\is-dnl89.tmp to %LOCALAPPDATA%\xplay standard library\wait.gif
- from %LOCALAPPDATA%\xplay standard library\is-lh2l4.tmp to %LOCALAPPDATA%\xplay standard library\webrtc.dll
- from %LOCALAPPDATA%\xplay standard library\is-0v3cg.tmp to %LOCALAPPDATA%\xplay standard library\wmadecode.dll
- from %LOCALAPPDATA%\xplay standard library\lang\is-5cs8r.tmp to %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.txt
- from %LOCALAPPDATA%\xplay standard library\is-kt7ds.tmp to %LOCALAPPDATA%\xplay standard library\xplaystdlib.exe
Substitutes the following files
- %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.dat
- %LOCALAPPDATA%\xplay standard library\lang\audioconverterripper.txt
- %LOCALAPPDATA%\xplay standard library\lang\feedback.dat
- %LOCALAPPDATA%\xplay standard library\lang\musictype.txt
- %LOCALAPPDATA%\xplay standard library\lang\update.log
Miscellaneous
Searches for the following windows
- ClassName: '' WindowName: 'X19ab1_XPSL1223FlashFixClass_X19ab1'
Creates and executes the following
- '%TEMP%\is-dl23t.tmp\<File name>.tmp' /SL5="$9023C,3818405,598528,<Full path to file>"
- '%LOCALAPPDATA%\xplay standard library\xplaystdlib.exe' -i
- '%LOCALAPPDATA%\xplay standard library\xplaystdlib.exe' -s
