Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KODAK Software Updater' = '%TEMP%\ins1.tmp\<Virus name>.exe -ReportOnly'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KODAK Software Updater' = '%TEMP%\ins1.tmp\<Virus name>.exe /NoIntervention'
- '%TEMP%\ins1.tmp\EnDisSrv.exe' -kdbwinstall
- '%TEMP%\ins1.tmp\KDInstOpt.exe'
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\DefPrefs.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\chandir.idx
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\UpgradePubKey.txt
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\main.wkg
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\chandir.dat
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\InfoCenter.htm
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\InfoCenter.GIF
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\cert.db
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWTargetInf.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x000a.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0009.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0011.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0010.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0007.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\InitInfo.iad
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWInsert.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\KDUnInst.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\filter.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\GenFlash\1\info.iad
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\EN\ClientRc.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Plugins\Npavi32.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\EN\frcomRc.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\EN\registerRC.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\Sprite6.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\VBFrext.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\FrExt.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\EN\SpriteRC.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\clntutil.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\browser.htm
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\background.gif
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\GenFlash\1\gen.bis
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\GenFlash\1\gen.bif
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\clasid.bak
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Install\win2000.dll
- %WINDIR%\bwUnin-6.1.2.93-7288971L.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Install\LiteInst.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Install\readme.txt
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0404.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\backWeb-7288971.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\InitData\Data\UsrPrefs.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWCHelpr-7288971.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWfiles-7288971.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\readme.txt
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0416.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x040c.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWSysUp.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0804.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\EnDisSrv.exe
- %WINDIR%\BWKDLogs\EnDisSrv.log
- %ALLUSERSPROFILE%\Start Menu\Programs\KODAK\KODAK Software Updater\Readme.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\KODAK\KODAK Software Updater\KODAK Software Updater Setup.lnk
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\enabled.txt
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\frext-7288971.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\frcom-7288971.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\BW_Install.log
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\vbfrext-7288971.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0404.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x000a.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0009.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0011.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0010.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0007.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0416.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x040c.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdsetup.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\kdlang\0x0804.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x000a.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0009.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0011.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0010.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\BWPBLAN\PB_0x0007.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x040c.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0404.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0804.HTM
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\Program\README\Updater_Readme_0x0416.HTM
- %TEMP%\ins1.tmp\kdlang.zip
- %TEMP%\ins1.tmp\KDInstOpt.exe
- %TEMP%\ins1.tmp\KDUnInst.exe
- %TEMP%\ins1.tmp\kdsetup.ini
- %TEMP%\ins1.tmp\Installer.zip
- %TEMP%\ins1.tmp\FileReplEn.zip
- %TEMP%\ins1.tmp\FileReplData.zip
- %TEMP%\ins1.tmp\InitInfo.iad
- %TEMP%\ins1.tmp\filter.ini
- %TEMP%\ins1.tmp\README.zip
- %TEMP%\ins1.tmp\Pre6Import.zip
- %TEMP%\ins1.tmp\Resources.zip
- %TEMP%\ins1.tmp\repbead.zip
- %TEMP%\ins1.tmp\olepro.zip
- %TEMP%\ins1.tmp\msvcp.zip
- %TEMP%\ins1.tmp\mfc.zip
- %TEMP%\ins1.tmp\npavi.zip
- %TEMP%\ins1.tmp\msvcrt.zip
- %TEMP%\ins1.tmp\filerepl.zip
- %TEMP%\ins1.tmp\axdist.exe
- %TEMP%\ins1.tmp\App.zip
- %TEMP%\ins1.tmp\backwebEn.zip
- %TEMP%\ins1.tmp\backwebdiet.zip
- %TEMP%\ins1.tmp\401comupd.exe
- %TEMP%\ins1.tmp\bw.inf
- %WINDIR%\warhead.ini
- %TEMP%\ins1.tmp\BWHelper.dll
- %TEMP%\ins1.tmp\pacsupport.js
- %TEMP%\ins1.tmp\clntutil.zip
- %TEMP%\ins1.tmp\Cfg.zip
- %TEMP%\ins1.tmp\EnDisSrv.exe
- %TEMP%\ins1.tmp\core.zip
- %TEMP%\ins1.tmp\BWTargetInf.dll
- %TEMP%\ins1.tmp\BWPBLAN.zip
- %TEMP%\ins1.tmp\BWInsert.exe
- %TEMP%\ins1.tmp\BWSysUp.exe
- %TEMP%\ins1.tmp\bwsetup.ini
- %TEMP%\ins1.tmp\snmpapi.zip
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\register.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\pacsupport.js
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\runner.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\Restart.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\loading.htm
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\Cpuinf32.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\bwxtext.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\IAdHide.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\ding.wav
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Data\FrSummary\plcm_rep.bis
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Data\FrSummary\plcm_rep.bif
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\FrCom.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Data\FrSummary\StoriesTemplate.cdf
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Data\FrSummary\info.iad
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\brand.bmp
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\runner.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\RepBead.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\Splash.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\bwsec.dll
- %WINDIR%\BWKDLogs\KDInstOpt.log
- %TEMP%\ins1.tmp\<Virus name>.exe
- %TEMP%\ins1.tmp\README.TXT
- %TEMP%\ins1.tmp\Win2000.dll
- %TEMP%\ins1.tmp\params.ini
- %TEMP%\ins1.tmp\Sprite.zip
- %TEMP%\ins1.tmp\splash.zip
- %TEMP%\ins1.tmp\uninstaller.zip
- %TEMP%\ins1.tmp\SpriteEn.zip
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\bwfiles.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\BWCHelpr.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\bwmib.dll
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\bwlang.ini
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Install\bwUnin.exe
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\Pre6Import.dll
- %TEMP%\BWInstall.log
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\backweb.tlb
- %ProgramFiles%\Kodak\KODAK Software Updater\7288971\6.1.2.93-7288971L\Program\backweb.dll
- %TEMP%\ins1.tmp\msvcrt.zip
- %TEMP%\ins1.tmp\msvcp.zip
- %TEMP%\ins1.tmp\npavi.zip
- %TEMP%\ins1.tmp\pacsupport.js
- %TEMP%\ins1.tmp\olepro.zip
- %TEMP%\ins1.tmp\mfc.zip
- %TEMP%\ins1.tmp\KDInstOpt.exe
- %TEMP%\ins1.tmp\Installer.zip
- %TEMP%\ins1.tmp\kdlang.zip
- %TEMP%\ins1.tmp\KDUnInst.exe
- %TEMP%\ins1.tmp\kdsetup.ini
- %TEMP%\ins1.tmp\params.ini
- %TEMP%\ins1.tmp\Sprite.zip
- %TEMP%\ins1.tmp\splash.zip
- %TEMP%\ins1.tmp\SpriteEn.zip
- %TEMP%\ins1.tmp\Win2000.dll
- %TEMP%\ins1.tmp\uninstaller.zip
- %TEMP%\ins1.tmp\snmpapi.zip
- %TEMP%\ins1.tmp\README.TXT
- %TEMP%\ins1.tmp\Pre6Import.zip
- %TEMP%\ins1.tmp\README.zip
- %TEMP%\ins1.tmp\Resources.zip
- %TEMP%\ins1.tmp\repbead.zip
- %TEMP%\ins1.tmp\bw.inf
- %TEMP%\ins1.tmp\backwebEn.zip
- %TEMP%\ins1.tmp\BWHelper.dll
- %TEMP%\ins1.tmp\BWPBLAN.zip
- %TEMP%\ins1.tmp\BWInsert.exe
- %TEMP%\ins1.tmp\backwebdiet.zip
- %TEMP%\ins1.tmp\401comupd.exe
- %WINDIR%\warhead.ini
- %TEMP%\ins1.tmp\App.zip
- %TEMP%\ins1.tmp\<Virus name>.exe
- %TEMP%\ins1.tmp\axdist.exe
- %TEMP%\ins1.tmp\bwsetup.ini
- %TEMP%\ins1.tmp\FileReplData.zip
- %TEMP%\ins1.tmp\filerepl.zip
- %TEMP%\ins1.tmp\FileReplEn.zip
- %TEMP%\ins1.tmp\InitInfo.iad
- %TEMP%\ins1.tmp\filter.ini
- %TEMP%\ins1.tmp\EnDisSrv.exe
- %TEMP%\ins1.tmp\BWTargetInf.dll
- %TEMP%\ins1.tmp\BWSysUp.exe
- %TEMP%\ins1.tmp\Cfg.zip
- %TEMP%\ins1.tmp\core.zip
- %TEMP%\ins1.tmp\clntutil.zip
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''