Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKLM\SOFTWARE\Classes\Winyl.mp3\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.tta\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.mpc\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.wv\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.ape\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.fla\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.flac\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.aiff\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.opus\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.aif\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.asf\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.wma\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.aac\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.m4a\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.oga\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.ogg\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.cue\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.wav\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
- [HKLM\SOFTWARE\Classes\Winyl.spx\shell\open\command] '' = '"%ProgramFiles(x86)%\Winyl\Winyl.exe" "%1"'
Sets the following service settings
- [HKLM\System\CurrentControlSet\Services\FlexGridService] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\FlexGridService] 'ImagePath' = '%ALLUSERSPROFILE%\FlexGridService\FlexGridService.exe'
Creates the following services
- 'FlexGridService' %ALLUSERSPROFILE%\FlexGridService\FlexGridService.exe
Modifies file system
Creates the following files
- %TEMP%\is-9pfkd.tmp\<File name>.tmp
- %ProgramFiles(x86)%\winyl\language\hungarian\is-rnrtu.tmp
- %ProgramFiles(x86)%\winyl\language\indonesian\is-o522q.tmp
- %ProgramFiles(x86)%\winyl\language\italian\is-kj6oi.tmp
- %ProgramFiles(x86)%\winyl\language\japanese\is-1s3ne.tmp
- %ProgramFiles(x86)%\winyl\language\korean\is-rdod5.tmp
- %ProgramFiles(x86)%\winyl\language\latvian\is-22r20.tmp
- %ProgramFiles(x86)%\winyl\language\polish\is-dcojf.tmp
- %ProgramFiles(x86)%\winyl\language\portuguese (brazil)\is-5i5p3.tmp
- %ProgramFiles(x86)%\winyl\language\romanian\is-86esf.tmp
- %ProgramFiles(x86)%\winyl\language\russian\is-8p8hj.tmp
- %ProgramFiles(x86)%\winyl\language\serbian\is-16dgc.tmp
- %ProgramFiles(x86)%\winyl\language\german\is-vffgq.tmp
- %ProgramFiles(x86)%\winyl\language\greek\is-hkt5q.tmp
- %ProgramFiles(x86)%\winyl\language\slovak\is-kh5kh.tmp
- %ProgramFiles(x86)%\winyl\language\swedish\is-kudhv.tmp
- %ProgramFiles(x86)%\winyl\language\turkish\is-ub3nf.tmp
- %ProgramFiles(x86)%\winyl\language\ukrainian\is-uceib.tmp
- %ProgramFiles(x86)%\winyl\language\vietnamese\is-33okt.tmp
- %ProgramFiles(x86)%\winyl\skin\is-5fmf0.tmp
- %ProgramFiles(x86)%\winyl\skin\is-jlcjm.tmp
- %ProgramFiles(x86)%\winyl\skin\is-de8md.tmp
- %ProgramFiles(x86)%\winyl\skin\is-pbvs5.tmp
- %ProgramFiles(x86)%\winyl\skin\is-j7hi8.tmp
- %ProgramFiles(x86)%\winyl\skin\is-ml6ut.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\winyl\winyl.lnk
- %ProgramFiles(x86)%\winyl\language\slovenian\is-162sk.tmp
- %ProgramFiles(x86)%\winyl\language\spanish\is-85k5a.tmp
- %ProgramFiles(x86)%\winyl\language\french\is-0c749.tmp
- %ProgramFiles(x86)%\winyl\language\english\is-vo6i1.tmp
- %ProgramFiles(x86)%\winyl\language\dutch\is-mvvud.tmp
- %TEMP%\is-d3ttd.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\winyl\is-suc5d.tmp
- %ProgramFiles(x86)%\winyl\is-bg1vn.tmp
- %ProgramFiles(x86)%\winyl\is-m5vuf.tmp
- %ProgramFiles(x86)%\winyl\is-lai0f.tmp
- %ProgramFiles(x86)%\winyl\is-a41jn.tmp
- %ProgramFiles(x86)%\winyl\is-22228.tmp
- %ProgramFiles(x86)%\winyl\is-e78i5.tmp
- %ProgramFiles(x86)%\winyl\is-gs65t.tmp
- %ProgramFiles(x86)%\winyl\is-0njtv.tmp
- %ProgramFiles(x86)%\winyl\bass\is-vs10h.tmp
- %ProgramFiles(x86)%\winyl\bass\is-1ck0l.tmp
- %TEMP%\is-d3ttd.tmp\_isetup\_setup64.tmp
- %ProgramFiles(x86)%\winyl\bass\is-uvj1g.tmp
- %ProgramFiles(x86)%\winyl\bass\is-ssm8c.tmp
- %ProgramFiles(x86)%\winyl\bass\is-8lfeo.tmp
- %ProgramFiles(x86)%\winyl\bass\is-qeiav.tmp
- %ProgramFiles(x86)%\winyl\bass\is-b215b.tmp
- %ProgramFiles(x86)%\winyl\bass\is-m6lbe.tmp
- %ProgramFiles(x86)%\winyl\bass\is-mokl6.tmp
- %ProgramFiles(x86)%\winyl\equalizer\is-vbsu3.tmp
- %ProgramFiles(x86)%\winyl\language\belarusian\is-fb93v.tmp
- %ProgramFiles(x86)%\winyl\language\bosnian\is-84rvi.tmp
- %ProgramFiles(x86)%\winyl\language\chinese (simple)\is-8qg0m.tmp
- %ProgramFiles(x86)%\winyl\language\chinese (traditional)\is-4i8qk.tmp
- %ProgramFiles(x86)%\winyl\language\czech\is-lvk1h.tmp
- %ProgramFiles(x86)%\winyl\bass\is-56m6u.tmp
- %ProgramFiles(x86)%\winyl\unins000.dat
- %ALLUSERSPROFILE%\flexgridservice\flexgridservice.exe
Deletes the following files
- %TEMP%\is-9pfkd.tmp\<File name>.tmp
Moves the following files
- from %ProgramFiles(x86)%\winyl\is-suc5d.tmp to %ProgramFiles(x86)%\winyl\unins000.exe
- from %ProgramFiles(x86)%\winyl\language\hungarian\is-rnrtu.tmp to %ProgramFiles(x86)%\winyl\language\hungarian\main.xml
- from %ProgramFiles(x86)%\winyl\language\indonesian\is-o522q.tmp to %ProgramFiles(x86)%\winyl\language\indonesian\main.xml
- from %ProgramFiles(x86)%\winyl\language\italian\is-kj6oi.tmp to %ProgramFiles(x86)%\winyl\language\italian\main.xml
- from %ProgramFiles(x86)%\winyl\language\japanese\is-1s3ne.tmp to %ProgramFiles(x86)%\winyl\language\japanese\main.xml
- from %ProgramFiles(x86)%\winyl\language\korean\is-rdod5.tmp to %ProgramFiles(x86)%\winyl\language\korean\main.xml
- from %ProgramFiles(x86)%\winyl\language\latvian\is-22r20.tmp to %ProgramFiles(x86)%\winyl\language\latvian\main.xml
- from %ProgramFiles(x86)%\winyl\language\polish\is-dcojf.tmp to %ProgramFiles(x86)%\winyl\language\polish\main.xml
- from %ProgramFiles(x86)%\winyl\language\portuguese (brazil)\is-5i5p3.tmp to %ProgramFiles(x86)%\winyl\language\portuguese (brazil)\main.xml
- from %ProgramFiles(x86)%\winyl\language\romanian\is-86esf.tmp to %ProgramFiles(x86)%\winyl\language\romanian\main.xml
- from %ProgramFiles(x86)%\winyl\language\russian\is-8p8hj.tmp to %ProgramFiles(x86)%\winyl\language\russian\main.xml
- from %ProgramFiles(x86)%\winyl\bass\is-ssm8c.tmp to %ProgramFiles(x86)%\winyl\bass\basswv.dll
- from %ProgramFiles(x86)%\winyl\language\serbian\is-16dgc.tmp to %ProgramFiles(x86)%\winyl\language\serbian\main.xml
- from %ProgramFiles(x86)%\winyl\language\slovenian\is-162sk.tmp to %ProgramFiles(x86)%\winyl\language\slovenian\main.xml
- from %ProgramFiles(x86)%\winyl\language\spanish\is-85k5a.tmp to %ProgramFiles(x86)%\winyl\language\spanish\main.xml
- from %ProgramFiles(x86)%\winyl\language\swedish\is-kudhv.tmp to %ProgramFiles(x86)%\winyl\language\swedish\main.xml
- from %ProgramFiles(x86)%\winyl\language\turkish\is-ub3nf.tmp to %ProgramFiles(x86)%\winyl\language\turkish\main.xml
- from %ProgramFiles(x86)%\winyl\language\ukrainian\is-uceib.tmp to %ProgramFiles(x86)%\winyl\language\ukrainian\main.xml
- from %ProgramFiles(x86)%\winyl\language\vietnamese\is-33okt.tmp to %ProgramFiles(x86)%\winyl\language\vietnamese\main.xml
- from %ProgramFiles(x86)%\winyl\skin\is-5fmf0.tmp to %ProgramFiles(x86)%\winyl\skin\dark.wzp
- from %ProgramFiles(x86)%\winyl\skin\is-jlcjm.tmp to %ProgramFiles(x86)%\winyl\skin\flat white.wzp
- from %ProgramFiles(x86)%\winyl\skin\is-de8md.tmp to %ProgramFiles(x86)%\winyl\skin\flat.wzp
- from %ProgramFiles(x86)%\winyl\skin\is-pbvs5.tmp to %ProgramFiles(x86)%\winyl\skin\itunes.wzp
- from %ProgramFiles(x86)%\winyl\language\german\is-vffgq.tmp to %ProgramFiles(x86)%\winyl\language\german\main.xml
- from %ProgramFiles(x86)%\winyl\language\greek\is-hkt5q.tmp to %ProgramFiles(x86)%\winyl\language\greek\main.xml
- from %ProgramFiles(x86)%\winyl\language\french\is-0c749.tmp to %ProgramFiles(x86)%\winyl\language\french\main.xml
- from %ProgramFiles(x86)%\winyl\language\english\is-vo6i1.tmp to %ProgramFiles(x86)%\winyl\language\english\main.xml
- from %ProgramFiles(x86)%\winyl\language\dutch\is-mvvud.tmp to %ProgramFiles(x86)%\winyl\language\dutch\main.xml
- from %ProgramFiles(x86)%\winyl\is-m5vuf.tmp to %ProgramFiles(x86)%\winyl\bass.dll
- from %ProgramFiles(x86)%\winyl\is-lai0f.tmp to %ProgramFiles(x86)%\winyl\bassasio.dll
- from %ProgramFiles(x86)%\winyl\is-a41jn.tmp to %ProgramFiles(x86)%\winyl\bassmix.dll
- from %ProgramFiles(x86)%\winyl\is-22228.tmp to %ProgramFiles(x86)%\winyl\basswasapi.dll
- from %ProgramFiles(x86)%\winyl\is-e78i5.tmp to %ProgramFiles(x86)%\winyl\bass_fx.dll
- from %ProgramFiles(x86)%\winyl\is-gs65t.tmp to %ProgramFiles(x86)%\winyl\file.ico
- from %ProgramFiles(x86)%\winyl\is-0njtv.tmp to %ProgramFiles(x86)%\winyl\license.txt
- from %ProgramFiles(x86)%\winyl\bass\is-vs10h.tmp to %ProgramFiles(x86)%\winyl\bass\bassalac.dll
- from %ProgramFiles(x86)%\winyl\bass\is-1ck0l.tmp to %ProgramFiles(x86)%\winyl\bass\bassflac.dll
- from %ProgramFiles(x86)%\winyl\bass\is-uvj1g.tmp to %ProgramFiles(x86)%\winyl\bass\bassopus.dll
- from %ProgramFiles(x86)%\winyl\skin\is-j7hi8.tmp to %ProgramFiles(x86)%\winyl\skin\light.wzp
- from %ProgramFiles(x86)%\winyl\language\slovak\is-kh5kh.tmp to %ProgramFiles(x86)%\winyl\language\slovak\main.xml
- from %ProgramFiles(x86)%\winyl\bass\is-56m6u.tmp to %ProgramFiles(x86)%\winyl\bass\basswma.dll
- from %ProgramFiles(x86)%\winyl\bass\is-qeiav.tmp to %ProgramFiles(x86)%\winyl\bass\bass_ape.dll
- from %ProgramFiles(x86)%\winyl\bass\is-b215b.tmp to %ProgramFiles(x86)%\winyl\bass\bass_mpc.dll
- from %ProgramFiles(x86)%\winyl\bass\is-m6lbe.tmp to %ProgramFiles(x86)%\winyl\bass\bass_spx.dll
- from %ProgramFiles(x86)%\winyl\bass\is-mokl6.tmp to %ProgramFiles(x86)%\winyl\bass\bass_tta.dll
- from %ProgramFiles(x86)%\winyl\equalizer\is-vbsu3.tmp to %ProgramFiles(x86)%\winyl\equalizer\presets.xml
- from %ProgramFiles(x86)%\winyl\language\belarusian\is-fb93v.tmp to %ProgramFiles(x86)%\winyl\language\belarusian\main.xml
- from %ProgramFiles(x86)%\winyl\language\bosnian\is-84rvi.tmp to %ProgramFiles(x86)%\winyl\language\bosnian\main.xml
- from %ProgramFiles(x86)%\winyl\language\chinese (simple)\is-8qg0m.tmp to %ProgramFiles(x86)%\winyl\language\chinese (simple)\main.xml
- from %ProgramFiles(x86)%\winyl\language\chinese (traditional)\is-4i8qk.tmp to %ProgramFiles(x86)%\winyl\language\chinese (traditional)\main.xml
- from %ProgramFiles(x86)%\winyl\language\czech\is-lvk1h.tmp to %ProgramFiles(x86)%\winyl\language\czech\main.xml
- from %ProgramFiles(x86)%\winyl\is-bg1vn.tmp to %ProgramFiles(x86)%\winyl\winyl.exe
- from %ProgramFiles(x86)%\winyl\bass\is-8lfeo.tmp to %ProgramFiles(x86)%\winyl\bass\bass_aac.dll
- from %ProgramFiles(x86)%\winyl\skin\is-ml6ut.tmp to %ProgramFiles(x86)%\winyl\skin\packskin.exe
Miscellaneous
Creates and executes the following
- '%TEMP%\is-9pfkd.tmp\<File name>.tmp' /SL5="$60248,2388352,58368,<Full path to file>"
- '%ProgramFiles(x86)%\winyl\winyl.exe'
