Trojan.DownLoader11.61430

Technical Information

Malicious functions:

Creates and executes the following:

'%TEMP%\mvu3.tmp\proshow.exe' -stub %TEMP%\nsj2.tmp\psgold_41_2737.exe,""
'%TEMP%\nsj2.tmp\psgold_41_2737.exe'

Executes the following:

'<SYSTEM32>\wbem\wmiadap.exe' /R /T

Modifies file system :

Creates the following files:

%TEMP%\mvu3.tmp\pxf\new_show
%TEMP%\mvu3.tmp\pxf\msgok-custom
%TEMP%\mvu3.tmp\pxf\nointro.psh
%TEMP%\mvu3.tmp\pxf\output_part_exe
%TEMP%\mvu3.tmp\pxf\nopbc.psh
%TEMP%\mvu3.tmp\pxf\msgbox
%TEMP%\mvu3.tmp\pxf\missing_files
%TEMP%\mvu3.tmp\pxf\msgflash
%TEMP%\mvu3.tmp\pxf\msgokca
%TEMP%\mvu3.tmp\pxf\msgok
%TEMP%\mvu3.tmp\pxf\preferences_colors
%TEMP%\mvu3.tmp\pxf\preferences
%TEMP%\mvu3.tmp\pxf\preferences_colors_preview
%TEMP%\mvu3.tmp\pxf\preferences_editors
%TEMP%\mvu3.tmp\pxf\preferences_defaults
%TEMP%\mvu3.tmp\pxf\output_part_shows
%TEMP%\mvu3.tmp\pxf\output_part_menu
%TEMP%\mvu3.tmp\pxf\precision_captions
%TEMP%\mvu3.tmp\pxf\precision_top
%TEMP%\mvu3.tmp\pxf\precision_motion
%TEMP%\mvu3.tmp\pxf\intro-wide.psh
%TEMP%\mvu3.tmp\pxf\intro.psh
%TEMP%\mvu3.tmp\pxf\lgpl.txt
%TEMP%\mvu3.tmp\pxf\macros
%TEMP%\mvu3.tmp\pxf\license_agreement
%TEMP%\mvu3.tmp\pxf\install_target
%TEMP%\mvu3.tmp\pxf\install_status
%TEMP%\mvu3.tmp\pxf\install_trial
%TEMP%\mvu3.tmp\pxf\intro.mp3
%TEMP%\mvu3.tmp\pxf\install_upgrade
%TEMP%\mvu3.tmp\pxf\menu_layers
%TEMP%\mvu3.tmp\pxf\menu_general
%TEMP%\mvu3.tmp\pxf\menu_layout
%TEMP%\mvu3.tmp\pxf\mini.scr
%TEMP%\mvu3.tmp\pxf\menu_theme
%TEMP%\mvu3.tmp\pxf\match_layers
%TEMP%\mvu3.tmp\pxf\main.msg
%TEMP%\mvu3.tmp\pxf\mediasource
%TEMP%\mvu3.tmp\pxf\menu_captions
%TEMP%\mvu3.tmp\pxf\menu
%TEMP%\mvu3.tmp\pxf\share_shows
%TEMP%\mvu3.tmp\pxf\share_menu
%TEMP%\mvu3.tmp\pxf\share_up
%TEMP%\mvu3.tmp\pxf\show_background
%TEMP%\mvu3.tmp\pxf\show
%TEMP%\mvu3.tmp\pxf\set_title
%TEMP%\mvu3.tmp\pxf\set_thumbnail
%TEMP%\mvu3.tmp\pxf\setup
%TEMP%\mvu3.tmp\pxf\share_agreement
%TEMP%\mvu3.tmp\pxf\share
%TEMP%\mvu3.tmp\pxf\slide_edit
%TEMP%\mvu3.tmp\pxf\slide_captions
%TEMP%\mvu3.tmp\pxf\slide_layers
%TEMP%\mvu3.tmp\pxf\slide_part_captions
%TEMP%\mvu3.tmp\pxf\slide_motion
%TEMP%\mvu3.tmp\pxf\show_show
%TEMP%\mvu3.tmp\pxf\show_captions
%TEMP%\mvu3.tmp\pxf\show_soundtrack
%TEMP%\mvu3.tmp\pxf\slide_background
%TEMP%\mvu3.tmp\pxf\slide
%TEMP%\mvu3.tmp\pxf\preferences_ui
%TEMP%\mvu3.tmp\pxf\preferences_thumbnails
%TEMP%\mvu3.tmp\pxf\problem_report
%TEMP%\mvu3.tmp\pxf\properties_new
%TEMP%\mvu3.tmp\pxf\properties
%TEMP%\mvu3.tmp\pxf\preferences_net
%TEMP%\mvu3.tmp\pxf\preferences_misc
%TEMP%\mvu3.tmp\pxf\preferences_playback
%TEMP%\mvu3.tmp\pxf\preferences_sounds
%TEMP%\mvu3.tmp\pxf\preferences_prompts
%TEMP%\mvu3.tmp\pxf\save_files
%TEMP%\mvu3.tmp\pxf\revert_to_backup
%TEMP%\mvu3.tmp\pxf\screensaver
%TEMP%\mvu3.tmp\pxf\screensaver_shows
%TEMP%\mvu3.tmp\pxf\screensaver_exe
%TEMP%\mvu3.tmp\pxf\record_slide_time
%TEMP%\mvu3.tmp\pxf\random_transitions
%TEMP%\mvu3.tmp\pxf\redeye
%TEMP%\mvu3.tmp\pxf\reset
%TEMP%\mvu3.tmp\pxf\register
%TEMP%\mvu3.tmp\pxf\install_running
%TEMP%\mvu3.tmp\pxf\device-htc-hero.jpg
%TEMP%\mvu3.tmp\pxf\device-htc-dream.jpg
%TEMP%\mvu3.tmp\pxf\device-htc-magic.jpg
%TEMP%\mvu3.tmp\pxf\device-tmobile-mytouch.jpg
%TEMP%\mvu3.tmp\pxf\device-tmobile-g1.jpg
%TEMP%\mvu3.tmp\pxf\device_custom
%TEMP%\mvu3.tmp\pxf\device-copy-youtube-wait
%TEMP%\mvu3.tmp\pxf\device-facebook.jpg
%TEMP%\mvu3.tmp\pxf\device-google-android.jpg
%TEMP%\mvu3.tmp\pxf\device-generic.jpg
%TEMP%\mvu3.tmp\pxf\dvd_exe
%TEMP%\mvu3.tmp\pxf\dvd_burning
%TEMP%\mvu3.tmp\pxf\dvd_menu
%TEMP%\mvu3.tmp\pxf\dvd_shows
%TEMP%\mvu3.tmp\pxf\dvd_options
%TEMP%\mvu3.tmp\pxf\device-twitter-wait
%TEMP%\mvu3.tmp\pxf\device-twitter
%TEMP%\mvu3.tmp\pxf\device-vimeo.jpg
%TEMP%\mvu3.tmp\pxf\dvd
%TEMP%\mvu3.tmp\pxf\download_extras
%TEMP%\mvu3.tmp\pxf\c_install
%TEMP%\mvu3.tmp\pxf\c_dialog
%TEMP%\mvu3.tmp\pxf\collect_show
%TEMP%\mvu3.tmp\pxf\copy_overwrite
%TEMP%\mvu3.tmp\pxf\color_picker
%TEMP%\mvu3.tmp\pxf\b_show
%TEMP%\mvu3.tmp\pxf\b_preferences
%TEMP%\mvu3.tmp\pxf\b_slide
%TEMP%\mvu3.tmp\pxf\c_box
%TEMP%\mvu3.tmp\pxf\caption_effects
%TEMP%\mvu3.tmp\pxf\device-copy-login
%TEMP%\mvu3.tmp\pxf\device-copy-facebook
%TEMP%\mvu3.tmp\pxf\device-copy-upload
%TEMP%\mvu3.tmp\pxf\device-copy-youtube
%TEMP%\mvu3.tmp\pxf\device-copy-vimeo
%TEMP%\mvu3.tmp\pxf\create
%TEMP%\mvu3.tmp\pxf\c_output
%TEMP%\mvu3.tmp\pxf\crop
%TEMP%\mvu3.tmp\pxf\device
%TEMP%\mvu3.tmp\pxf\d_dialog
%TEMP%\mvu3.tmp\pxf\flash_shows
%TEMP%\mvu3.tmp\pxf\flash_options
%TEMP%\mvu3.tmp\pxf\get_value
%TEMP%\mvu3.tmp\pxf\import_from_different
%TEMP%\mvu3.tmp\pxf\gpl.txt
%TEMP%\mvu3.tmp\pxf\file_rename
%TEMP%\mvu3.tmp\pxf\file_removefolder
%TEMP%\mvu3.tmp\pxf\flash
%TEMP%\mvu3.tmp\pxf\flash_menu
%TEMP%\mvu3.tmp\pxf\flash_html
%TEMP%\mvu3.tmp\pxf\install_free
%TEMP%\mvu3.tmp\pxf\install_finish
%TEMP%\mvu3.tmp\pxf\install_license
%TEMP%\mvu3.tmp\pxf\install_register
%TEMP%\mvu3.tmp\pxf\install_options
%TEMP%\mvu3.tmp\pxf\importing
%TEMP%\mvu3.tmp\pxf\import_from_removable
%TEMP%\mvu3.tmp\pxf\install
%TEMP%\mvu3.tmp\pxf\install_fail
%TEMP%\mvu3.tmp\pxf\install_confirm
%TEMP%\mvu3.tmp\pxf\email_exe
%TEMP%\mvu3.tmp\pxf\email_compose
%TEMP%\mvu3.tmp\pxf\email_menu
%TEMP%\mvu3.tmp\pxf\e_menu
%TEMP%\mvu3.tmp\pxf\email_shows
%TEMP%\mvu3.tmp\pxf\e_box
%TEMP%\mvu3.tmp\pxf\e_border
%TEMP%\mvu3.tmp\pxf\e_dialog
%TEMP%\mvu3.tmp\pxf\email
%TEMP%\mvu3.tmp\pxf\e_install
%TEMP%\mvu3.tmp\pxf\exe_exe
%TEMP%\mvu3.tmp\pxf\exe
%TEMP%\mvu3.tmp\pxf\exe_menu
%TEMP%\mvu3.tmp\pxf\file_makefolder
%TEMP%\mvu3.tmp\pxf\exe_shows
%TEMP%\mvu3.tmp\pxf\e_pacify
%TEMP%\mvu3.tmp\pxf\e_output
%TEMP%\mvu3.tmp\pxf\e_preferences
%TEMP%\mvu3.tmp\pxf\e_slide
%TEMP%\mvu3.tmp\pxf\e_show
%TEMP%\mvu3.tmp\styles\Photo Stack 2 Collapsing.pxs
%TEMP%\mvu3.tmp\styles\Photo Stack 1 Still.pxs
%TEMP%\mvu3.tmp\styles\Photo Stack 2 Expanding.pxs
%TEMP%\mvu3.tmp\styles\Scrolling Credits.pxs
%TEMP%\mvu3.tmp\styles\Photo Stack 2 Still.pxs
%TEMP%\mvu3.tmp\styles\Images of Love Still.pxs
%TEMP%\mvu3.tmp\styles\Images of Love.pxs
%TEMP%\mvu3.tmp\styles\nostyle.pxs
%TEMP%\mvu3.tmp\styles\Photo Stack 1 Expanding.pxs
%TEMP%\mvu3.tmp\styles\Photo Stack 1 Collapsing.pxs
%TEMP%\mvu3.tmp\styles\Swap Left 1.pxs
%TEMP%\mvu3.tmp\styles\Still Photo White.pxs
%TEMP%\mvu3.tmp\styles\Swap Left 2.pxs
%TEMP%\mvu3.tmp\styles\Swap Right 2.pxs
%TEMP%\mvu3.tmp\styles\Swap Right 1.pxs
%TEMP%\mvu3.tmp\styles\Single Snapshot Still.pxs
%TEMP%\mvu3.tmp\styles\Single Snapshot.pxs
%TEMP%\mvu3.tmp\styles\Spin and Grow.pxs
%TEMP%\mvu3.tmp\styles\Still Photo Black.pxs
%TEMP%\mvu3.tmp\styles\Spin and Shrink.pxs
%TEMP%\mvu3.tmp\styles\Display of Five 4x3.pxs
%TEMP%\mvu3.tmp\styles\Colorize Sepia Antiqued.pxs
%TEMP%\mvu3.tmp\styles\Display of Five.pxs
%TEMP%\mvu3.tmp\styles\Display of Five Still.pxs
%TEMP%\mvu3.tmp\styles\Display of Five Still 4x3.pxs
%TEMP%\mvu3.tmp\styles\A Photo Border 4x3.pxs
%TEMP%\mvu3.tmp\styles\A Moving Backdrop.pxs
%TEMP%\mvu3.tmp\styles\A Photo Border.pxs
%TEMP%\mvu3.tmp\styles\Colorize Grayscale.pxs
%TEMP%\mvu3.tmp\styles\Coasting.pxs
%TEMP%\mvu3.tmp\styles\Filmstrip Border 4x3.pxs
%TEMP%\mvu3.tmp\styles\Display of Three Still.pxs
%TEMP%\mvu3.tmp\styles\Filmstrip Border.pxs
%TEMP%\mvu3.tmp\styles\Filmstrip Border Still.pxs
%TEMP%\mvu3.tmp\styles\Filmstrip Border Still 4x3.pxs
%TEMP%\mvu3.tmp\styles\Display of Nine Expanding.pxs
%TEMP%\mvu3.tmp\styles\Display of Nine Collapsing.pxs
%TEMP%\mvu3.tmp\styles\Display of Nine Still.pxs
%TEMP%\mvu3.tmp\styles\Display of Three Expanding.pxs
%TEMP%\mvu3.tmp\styles\Display of Three Collapsing.pxs
%TEMP%\mvu3.tmp\nullfilter.ax
%TEMP%\mvu3.tmp\pro.dnt
%TEMP%\mvu3.tmp\susi
%TEMP%\dpx5.tmp
%TEMP%\dpr4.tmp
%TEMP%\mvu3.tmp\devicec.dll
%TEMP%\mvu3.tmp\defscr
%TEMP%\mvu3.tmp\docscr
%TEMP%\mvu3.tmp\dshow.exe
%TEMP%\mvu3.tmp\about.px
%APPDATA%\Photodex\ProShow Gold\def.dat
%HOMEPATH%\Cookies\%USERNAME%@www.photodex[2].txt
%TEMP%\mvu3.tmp\proshow.cfg
%TEMP%\mvu3.tmp\proshow.phd
%TEMP%\mvu3.tmp\compupic.jrn
%TEMP%\dpx7.tmp
%TEMP%\dpr6.tmp
%TEMP%\mvu3.tmp\assoc.cfg
%HOMEPATH%\Cookies\%USERNAME%@www.photodex[1].txt
%TEMP%\mvu3.tmp\pshowtoken
%TEMP%\mvu3.tmp\styles\Title with Four Images.pxs
%TEMP%\mvu3.tmp\styles\Title with Four Images 4x3.pxs
%TEMP%\mvu3.tmp\styles\Title with Four Images Still 4x3.pxs
%TEMP%\mvu3.tmp\styles\Triptych 4x3.pxs
%TEMP%\mvu3.tmp\styles\Title with Four Images Still.pxs
%TEMP%\mvu3.tmp\styles\Three to One 4x3.pxs
%TEMP%\mvu3.tmp\styles\Swap Still.pxs
%TEMP%\mvu3.tmp\styles\Three to One.pxs
%TEMP%\mvu3.tmp\styles\Three to One Still.pxs
%TEMP%\mvu3.tmp\styles\Three to One Still 4x3.pxs
%TEMP%\mvu3.tmp\scsiaccess.exe
%TEMP%\mvu3.tmp\device-dl
%TEMP%\mvu3.tmp\ddt.dnt
%TEMP%\mvu3.tmp\pdexf.dll
%TEMP%\mvu3.tmp\version
%TEMP%\mvu3.tmp\styles\Triptych Still 4x3.pxs
%TEMP%\mvu3.tmp\styles\Triptych.pxs
%TEMP%\mvu3.tmp\styles\Triptych Still.pxs
%TEMP%\mvu3.tmp\device-enc.dll
%TEMP%\mvu3.tmp\devicef.dll
%TEMP%\mvu3.tmp\wnaspint.dll
%TEMP%\mvu3.tmp\pxf\trial_overview
%TEMP%\mvu3.tmp\pxf\trial_finish
%TEMP%\mvu3.tmp\pxf\trial_step1
%TEMP%\mvu3.tmp\pxf\trial_step3
%TEMP%\mvu3.tmp\pxf\trial_step2
%TEMP%\mvu3.tmp\pxf\support
%TEMP%\mvu3.tmp\pxf\style_manage
%TEMP%\mvu3.tmp\pxf\tab
%TEMP%\mvu3.tmp\pxf\trial_buy
%TEMP%\mvu3.tmp\pxf\trial
%TEMP%\mvu3.tmp\pxf\vcd_menu
%TEMP%\mvu3.tmp\pxf\vcd_exe
%TEMP%\mvu3.tmp\pxf\vcd_options
%TEMP%\mvu3.tmp\pxf\video
%TEMP%\mvu3.tmp\pxf\vcd_shows
%TEMP%\mvu3.tmp\pxf\update_burning
%TEMP%\mvu3.tmp\pxf\trial_welcome
%TEMP%\mvu3.tmp\pxf\update_prompt
%TEMP%\mvu3.tmp\pxf\vcd_burning
%TEMP%\mvu3.tmp\pxf\vcd
%TEMP%\mvu3.tmp\pxf\slide_times
%TEMP%\mvu3.tmp\pxf\slide_style
%TEMP%\mvu3.tmp\pxf\slide_video
%TEMP%\mvu3.tmp\pxf\sound_record
%TEMP%\mvu3.tmp\pxf\sound_play
%TEMP%\mvu3.tmp\pxf\slide_part_layers
%TEMP%\mvu3.tmp\pxf\slide_part_keyframes
%TEMP%\mvu3.tmp\pxf\slide_part_sound
%TEMP%\mvu3.tmp\pxf\slide_sounds
%TEMP%\mvu3.tmp\pxf\slide_slide
%TEMP%\mvu3.tmp\pxf\status_rip
%TEMP%\mvu3.tmp\pxf\status_rendering
%TEMP%\mvu3.tmp\pxf\style_categories
%TEMP%\mvu3.tmp\pxf\style_edit
%TEMP%\mvu3.tmp\pxf\style_create
%TEMP%\mvu3.tmp\pxf\status_disc
%TEMP%\mvu3.tmp\pxf\status_captureframe
%TEMP%\mvu3.tmp\pxf\status_disc_iso
%TEMP%\mvu3.tmp\pxf\status_loading_show
%TEMP%\mvu3.tmp\pxf\status_iso
%TEMP%\mvu3.tmp\pxf\wait_transcode
%TEMP%\mvu3.tmp\pxf\wait_styles
%TEMP%\mvu3.tmp\pxf\wait_updater
%TEMP%\mvu3.tmp\pxf\wait_writer
%TEMP%\mvu3.tmp\pxf\wait_vcd
%TEMP%\mvu3.tmp\pxf\wait_px
%TEMP%\mvu3.tmp\pxf\wait_project
%TEMP%\mvu3.tmp\pxf\wait_rip
%TEMP%\mvu3.tmp\pxf\wait_screensaver
%TEMP%\mvu3.tmp\pxf\wait_rip_info
%TEMP%\mvu3.tmp\pxf\window_layout_save
%TEMP%\mvu3.tmp\pxf\window_layout_load
%TEMP%\mvu3.tmp\directx.exe
%TEMP%\mvu3.tmp\fvideo.exe
%TEMP%\mvu3.tmp\sound.bdmv
%TEMP%\mvu3.tmp\pxf\web_html
%TEMP%\mvu3.tmp\pxf\web
%TEMP%\mvu3.tmp\pxf\web_menu
%TEMP%\mvu3.tmp\pxf\web_shows
%TEMP%\mvu3.tmp\pxf\web_options
%TEMP%\mvu3.tmp\pxf\video_wmv
%TEMP%\mvu3.tmp\pxf\video_trimmer
%TEMP%\mvu3.tmp\pxf\wait_aspi
%TEMP%\mvu3.tmp\pxf\wait_cdrw
%TEMP%\mvu3.tmp\pxf\wait_autorun
%TEMP%\mvu3.tmp\pxf\video_mp4
%TEMP%\mvu3.tmp\pxf\video_flv
%TEMP%\mvu3.tmp\pxf\video_mpg
%TEMP%\mvu3.tmp\pxf\video_theora
%TEMP%\mvu3.tmp\pxf\video_qt
%TEMP%\mvu3.tmp\pxf\wait_presenter
%TEMP%\mvu3.tmp\pxf\wait_keystroke
%TEMP%\mvu3.tmp\pxf\wait_problem_report
%TEMP%\mvu3.tmp\pxf\wait_processing_video
%TEMP%\mvu3.tmp\pxf\wait_processing_audio
%TEMP%\mvu3.tmp\pxf\wait_device
%TEMP%\mvu3.tmp\pxf\wait_collect
%TEMP%\mvu3.tmp\pxf\wait_dvd
%TEMP%\mvu3.tmp\pxf\wait_exe
%TEMP%\mvu3.tmp\pxf\wait_erase_disc
%TEMP%\mvu3.tmp\pxf\b_pacify
%TEMP%\mvu3.tmp\pxf\images\cpknobx
%TEMP%\mvu3.tmp\pxf\images\cpknob
%TEMP%\mvu3.tmp\pxf\images\cwipe
%TEMP%\mvu3.tmp\pxf\images\ed1
%TEMP%\mvu3.tmp\pxf\images\ed0
%TEMP%\mvu3.tmp\pxf\images\chekdoor
%TEMP%\mvu3.tmp\pxf\images\checker
%TEMP%\mvu3.tmp\pxf\images\cpicker
%TEMP%\mvu3.tmp\pxf\images\cpickerx
%TEMP%\mvu3.tmp\pxf\images\cpickerh
%TEMP%\mvu3.tmp\pxf\images\enable_manual.jpg
%TEMP%\mvu3.tmp\pxf\images\enable_gray.jpg
%TEMP%\mvu3.tmp\pxf\images\filenotfound
%TEMP%\mvu3.tmp\pxf\images\flyout.jpg
%TEMP%\mvu3.tmp\pxf\images\flyin.jpg
%TEMP%\mvu3.tmp\pxf\images\edh1
%TEMP%\mvu3.tmp\pxf\images\edh0
%TEMP%\mvu3.tmp\pxf\images\edx0
%TEMP%\mvu3.tmp\pxf\images\enable_auto.jpg
%TEMP%\mvu3.tmp\pxf\images\edx1
%TEMP%\mvu3.tmp\pxf\images\button_slide_stop.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_start.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_tab.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_up.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_time.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_resume.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_properties.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_right.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_speaker.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_speakeroff.png
%TEMP%\mvu3.tmp\pxf\images\cbpar
%TEMP%\mvu3.tmp\pxf\images\cbon
%TEMP%\mvu3.tmp\pxf\images\cbred
%TEMP%\mvu3.tmp\pxf\images\chapter.png
%TEMP%\mvu3.tmp\pxf\images\cbx
%TEMP%\mvu3.tmp\pxf\images\button_styles_thumbnails.png
%TEMP%\mvu3.tmp\pxf\images\button_styles_list.png
%TEMP%\mvu3.tmp\pxf\images\cbgreen
%TEMP%\mvu3.tmp\pxf\images\cboff
%TEMP%\mvu3.tmp\pxf\images\cbhl
%TEMP%\mvu3.tmp\pxf\images\output_exe_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_exe.jpg
%TEMP%\mvu3.tmp\pxf\images\output_facebook.jpg
%TEMP%\mvu3.tmp\pxf\images\output_flash.jpg
%TEMP%\mvu3.tmp\pxf\images\output_facebook_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_dvd.jpg
%TEMP%\mvu3.tmp\pxf\images\output_device_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_dvd_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_email_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_email.jpg
%TEMP%\mvu3.tmp\pxf\images\output_vcd_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_vcd.jpg
%TEMP%\mvu3.tmp\pxf\images\output_video.jpg
%TEMP%\mvu3.tmp\pxf\images\output_vimeo.jpg
%TEMP%\mvu3.tmp\pxf\images\output_video_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_screensaver.jpg
%TEMP%\mvu3.tmp\pxf\images\output_flash_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_screensaver_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_share_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_share.jpg
%TEMP%\mvu3.tmp\pxf\images\lb_back.png
%TEMP%\mvu3.tmp\pxf\images\keyx.bmp
%TEMP%\mvu3.tmp\pxf\images\lb_sndback.png
%TEMP%\mvu3.tmp\pxf\images\locked_un.jpg
%TEMP%\mvu3.tmp\pxf\images\locked.jpg
%TEMP%\mvu3.tmp\pxf\images\heart
%TEMP%\mvu3.tmp\pxf\images\gradients.jpg
%TEMP%\mvu3.tmp\pxf\images\hour.bmp
%TEMP%\mvu3.tmp\pxf\images\key.jpg
%TEMP%\mvu3.tmp\pxf\images\hour.jpg
%TEMP%\mvu3.tmp\pxf\images\output_autorun_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_autorun.jpg
%TEMP%\mvu3.tmp\pxf\images\output_bluray.jpg
%TEMP%\mvu3.tmp\pxf\images\output_device.jpg
%TEMP%\mvu3.tmp\pxf\images\output_bluray_x.bmp
%TEMP%\mvu3.tmp\pxf\images\locked_x.bmp
%TEMP%\mvu3.tmp\pxf\images\locked_un_x.bmp
%TEMP%\mvu3.tmp\pxf\images\mask2
%TEMP%\mvu3.tmp\pxf\images\mousex.bmp
%TEMP%\mvu3.tmp\pxf\images\mouse.jpg
%TEMP%\mvu3.tmp\pxf\images\button_slide_precision.png
%TEMP%\mvu3.tmp\menus\four.lay
%TEMP%\mvu3.tmp\menus\Floral1z.thm
%TEMP%\mvu3.tmp\menus\fourlistonly.lay
%TEMP%\mvu3.tmp\menus\Holiday06z.thm
%TEMP%\mvu3.tmp\menus\Holiday06.thm
%TEMP%\mvu3.tmp\menus\eight.lay
%TEMP%\mvu3.tmp\menus\BG001z.thm
%TEMP%\mvu3.tmp\menus\eightlistonly.lay
%TEMP%\mvu3.tmp\menus\Floral1.thm
%TEMP%\mvu3.tmp\menus\fivelistonly.lay
%TEMP%\mvu3.tmp\menus\six.lay
%TEMP%\mvu3.tmp\menus\Seasons06z.thm
%TEMP%\mvu3.tmp\menus\sixlistonly.lay
%TEMP%\mvu3.tmp\menus\threedown.lay
%TEMP%\mvu3.tmp\menus\threecenter.lay
%TEMP%\mvu3.tmp\menus\onelistonly.lay
%TEMP%\mvu3.tmp\menus\onecenter.lay
%TEMP%\mvu3.tmp\menus\Seasons04.thm
%TEMP%\mvu3.tmp\menus\Seasons06.thm
%TEMP%\mvu3.tmp\menus\Seasons04z.thm
%TEMP%\mvu3.tmp\remove.exe
%TEMP%\mvu3.tmp\proshow-player.swf
%TEMP%\mvu3.tmp\fvideoi.exe
%TEMP%\mvu3.tmp\qtime.exe
%TEMP%\mvu3.tmp\cpicoeme.bmp
%TEMP%\fceupdater.exe
%TEMP%\nsj2.tmp\psgold_41_2737.exe
%TEMP%\mvu3.tmp\ix
%TEMP%\mvu3.tmp\proshow.chm
%TEMP%\mvu3.tmp\proshow.exe
%TEMP%\mvu3.tmp\menus\Abstract2z.thm
%TEMP%\mvu3.tmp\menus\Abstract2.thm
%TEMP%\mvu3.tmp\menus\Abstract4.thm
%TEMP%\mvu3.tmp\menus\BG001.thm
%TEMP%\mvu3.tmp\menus\Abstract4z.thm
%TEMP%\mvu3.tmp\00000.bdjo
%TEMP%\mvu3.tmp\deviced.dll
%TEMP%\mvu3.tmp\index.bdmv
%TEMP%\mvu3.tmp\menus\Abstract1z.thm
%TEMP%\mvu3.tmp\menus\Abstract1.thm
%TEMP%\mvu3.tmp\pxf\images\button_preview_stop.png
%TEMP%\mvu3.tmp\pxf\images\button_preview_play.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_add.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_delete.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_copy.png
%TEMP%\mvu3.tmp\pxf\images\button_menu_open.png
%TEMP%\mvu3.tmp\pxf\images\brush
%TEMP%\mvu3.tmp\pxf\images\button_menu_save.png
%TEMP%\mvu3.tmp\pxf\images\button_preview_last.png
%TEMP%\mvu3.tmp\pxf\images\button_preview_first.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_left.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_large.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_options.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_play.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_pause.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_editor.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_down.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_end.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_kfeditor.png
%TEMP%\mvu3.tmp\pxf\images\button_slide_kfcopy.png
%TEMP%\mvu3.tmp\load
%TEMP%\mvu3.tmp\pxplay.exe
%TEMP%\mvu3.tmp\audiograbber.ax
%TEMP%\mvu3.tmp\devices.dll
%TEMP%\mvu3.tmp\00000.jar
%TEMP%\mvu3.tmp\menus\threelistonly.lay
%TEMP%\mvu3.tmp\menus\threeleft.lay
%TEMP%\mvu3.tmp\menus\threetop.lay
%TEMP%\mvu3.tmp\menus\twolistonly.lay
%TEMP%\mvu3.tmp\menus\twocenter.lay
%TEMP%\mvu3.tmp\content\Backgrounds\Seasons_04.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\Holidays_06.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\Seasons_06.jpg
%TEMP%\mvu3.tmp\pxf\images\bluray-thumbnail.jpg
%TEMP%\mvu3.tmp\pxf\images\arrowhead.png
%TEMP%\mvu3.tmp\content\Backgrounds\Abstract_02.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\Abstract_01.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\Abstract_04.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\Floral_01.jpg
%TEMP%\mvu3.tmp\content\Backgrounds\BG_001.jpg
%TEMP%\mvu3.tmp\pxf\images\trial_tour_gold.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_timeline_x.bmp
%TEMP%\mvu3.tmp\pxf\images\twinkle
%TEMP%\mvu3.tmp\pxf\images\warning.jpg
%TEMP%\mvu3.tmp\pxf\images\warning.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_stop.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_start.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_styles.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_timeline.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_styles_x.bmp
%TEMP%\mvu3.tmp\order.html
%TEMP%\mvu3.tmp\cpicopen.txt
%TEMP%\mvu3.tmp\colors\Blue.pcc
%TEMP%\mvu3.tmp\colors\Grey.pcc
%TEMP%\mvu3.tmp\colors\Green.pcc
%TEMP%\mvu3.tmp\pxf\images\xicons
%TEMP%\mvu3.tmp\pxf\images\waves
%TEMP%\mvu3.tmp\stub
%TEMP%\mvu3.tmp\if.dnt
%TEMP%\mvu3.tmp\pshowflash-menu.swf
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_menu_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_menu.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_up.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_resume.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_up_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_play.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_pause.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_play_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_down_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_project_down.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_slide.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_show_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_slidelist.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_slide_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_slidelist_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_saveall_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_saveall.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_save.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_show.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_save_x.bmp
%TEMP%\mvu3.tmp\pxf\b_border
%TEMP%\mvu3.tmp\pxf\autorun_shows
%TEMP%\mvu3.tmp\pxf\b_box
%TEMP%\mvu3.tmp\pxf\b_install
%TEMP%\mvu3.tmp\pxf\b_dialog
%TEMP%\mvu3.tmp\pxf\autorun
%TEMP%\mvu3.tmp\pxf\audio_trimmer
%TEMP%\mvu3.tmp\pxf\autorun_burning
%TEMP%\mvu3.tmp\pxf\autorun_menu
%TEMP%\mvu3.tmp\pxf\autorun_exe
%TEMP%\mvu3.tmp\pxf\bluray_shows
%TEMP%\mvu3.tmp\pxf\bluray_options
%TEMP%\mvu3.tmp\pxf\bluray_warn
%TEMP%\mvu3.tmp\pxf\b_output
%TEMP%\mvu3.tmp\pxf\b_menu
%TEMP%\mvu3.tmp\pxf\bluray
%TEMP%\mvu3.tmp\pxf\blank
%TEMP%\mvu3.tmp\pxf\bluray_burning
%TEMP%\mvu3.tmp\pxf\bluray_menu
%TEMP%\mvu3.tmp\pxf\bluray_exe
%TEMP%\mvu3.tmp\device.dll
%TEMP%\mvu3.tmp\deviceu.dll
%TEMP%\mvu3.tmp\runmenot.exe
%TEMP%\mvu3.tmp\videograbber.ax
%TEMP%\mvu3.tmp\pshow.dnt
%TEMP%\mvu3.tmp\colors\ProShow Producer.pcc
%TEMP%\mvu3.tmp\colors\ProShow Gold.pcc
%TEMP%\mvu3.tmp\colors\Red.pcc
%TEMP%\mvu3.tmp\pxsetup.exe
%TEMP%\mvu3.tmp\colors\System Colors.pcc
%TEMP%\mvu3.tmp\pxf\audio_fail
%TEMP%\mvu3.tmp\pxf\about
%TEMP%\mvu3.tmp\pxf\audio_rip
%TEMP%\mvu3.tmp\pxf\audiosync_selected
%TEMP%\mvu3.tmp\pxf\audiosync
%TEMP%\mvu3.tmp\grabfilt.ax
%TEMP%\mvu3.tmp\devicew.dll
%TEMP%\mvu3.tmp\burn.dll
%TEMP%\mvu3.tmp\all.dnt
%TEMP%\mvu3.tmp\proshow.ini
%TEMP%\mvu3.tmp\pxf\images\toolbar_output_x.bmp
%TEMP%\mvu3.tmp\pxf\images\setup_gold.jpg
%TEMP%\mvu3.tmp\pxf\images\s_empty
%TEMP%\mvu3.tmp\pxf\images\show_thumbnail.jpg
%TEMP%\mvu3.tmp\pxf\images\squaret
%TEMP%\mvu3.tmp\pxf\images\spiral
%TEMP%\mvu3.tmp\pxf\images\sb
%TEMP%\mvu3.tmp\pxf\images\reset.bmp
%TEMP%\mvu3.tmp\pxf\images\sba
%TEMP%\mvu3.tmp\pxf\images\sbva
%TEMP%\mvu3.tmp\pxf\images\sbv
%TEMP%\mvu3.tmp\pxf\images\tcexp
%TEMP%\mvu3.tmp\pxf\images\tccol
%TEMP%\mvu3.tmp\pxf\images\text_justify.png
%TEMP%\mvu3.tmp\pxf\images\timeline_minus_x.bmp
%TEMP%\mvu3.tmp\pxf\images\timeline_minus.jpg
%TEMP%\mvu3.tmp\pxf\images\star2
%TEMP%\mvu3.tmp\pxf\images\star
%TEMP%\mvu3.tmp\pxf\images\star3
%TEMP%\mvu3.tmp\pxf\images\swirl2
%TEMP%\mvu3.tmp\pxf\images\swirl
%TEMP%\mvu3.tmp\pxf\images\peyex
%TEMP%\mvu3.tmp\pxf\images\peye
%TEMP%\mvu3.tmp\pxf\images\photodex.jpg
%TEMP%\mvu3.tmp\pxf\images\plasma
%TEMP%\mvu3.tmp\pxf\images\photodexlogo.png
%TEMP%\mvu3.tmp\pxf\images\output_web.jpg
%TEMP%\mvu3.tmp\pxf\images\output_vimeo_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_web_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_youtube_x.bmp
%TEMP%\mvu3.tmp\pxf\images\output_youtube.jpg
%TEMP%\mvu3.tmp\pxf\images\rbon
%TEMP%\mvu3.tmp\pxf\images\rboff_s
%TEMP%\mvu3.tmp\pxf\images\rbon_s
%TEMP%\mvu3.tmp\pxf\images\rbx
%TEMP%\mvu3.tmp\pxf\images\rbpar_s
%TEMP%\mvu3.tmp\pxf\images\pshowx.jpg
%TEMP%\mvu3.tmp\pxf\images\producer_reel.png
%TEMP%\mvu3.tmp\pxf\images\puzzle
%TEMP%\mvu3.tmp\pxf\images\rboff
%TEMP%\mvu3.tmp\pxf\images\rbhl
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_delete.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_cut_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_delete_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_paste.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_blank_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_copy.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_cut.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_copy_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_new_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_new.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_open.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_output.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_open_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_title.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_paste_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_title_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_music_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_music.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_background_preview.png
%TEMP%\mvu3.tmp\pxf\images\toolbar_background_lightbox.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_captions.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_effects.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_captions_x.bmp
%TEMP%\mvu3.tmp\pxf\images\timeline_plus_x.bmp
%TEMP%\mvu3.tmp\pxf\images\timeline_plus.jpg
%TEMP%\mvu3.tmp\pxf\images\timeline_sound.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_background.bmp
%TEMP%\mvu3.tmp\pxf\images\timeline_sound_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_layers_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_layers.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_add.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_blank.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_lightbox_add_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_first.jpg
%TEMP%\mvu3.tmp\pxf\images\toolbar_effects_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_first_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_last_x.bmp
%TEMP%\mvu3.tmp\pxf\images\toolbar_last.jpg

Deletes the following files:

%HOMEPATH%\Cookies\%USERNAME%@www.photodex[1].txt
%APPDATA%\Photodex\ProShow Gold\def.dat
%TEMP%\mvu3.tmp\compupic.jrn
<SYSTEM32>\PerfStringBackup.TMP
%TEMP%\dpr4.tmp
%TEMP%\mvu3.tmp\proshow.exe
<SYSTEM32>\wbem\Performance\WmiApRpl.ini

Network activity:

Connects to:

'ps#####ds.photodex.com':80

UDP:

DNS ASK ps#####ds.photodex.com

Miscellaneous:

Searches for the following windows:

ClassName: 'AGDSSetupParent' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial