Technical Information
- [<HKLM>\SOFTWARE\Classes\binimage\shell\open\command] '' = '"%ProgramFiles%\UltraISO\UltraISO.exe" "%1"'
- [<HKLM>\SOFTWARE\Classes\UltraISO\shell\open\command] '' = '"%ProgramFiles%\UltraISO\UltraISO.exe" "%1"'
- [<HKLM>\SYSTEM\ControlSet001\Services\ISODrive] 'ImagePath' = '%ProgramFiles%\UltraISO\drivers\ISODrive.sys'
- [<HKLM>\SYSTEM\ControlSet001\Services\ISODrive] 'Start' = '00000001'
- '%TEMP%\server.exe' (downloaded from the Internet)
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\UltraISO\isoshell.dll"
- '%TEMP%\is-073D4.tmp\uiso9_pe.tmp' /SL5="$1012A,3301434,123392,%TEMP%\7ZipSfx.001\uiso9_pe.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ProgramFiles%\UltraISO\drivers\IsoCmd.exe' -i
- '%TEMP%\server.exe'
- '%TEMP%\7ZipSfx.001\uiso9_pe.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ALLUSERSPROFILE%\Application Data\ultraiso\ultraiso\1.0.0.0\temp\UltraaIso.exe'
- '%ALLUSERSPROFILE%\Application Data\ultraiso\ultraiso\1.0.0.0\temp\UltraIso.exe'
- '%TEMP%\RarSFX0\uiso9_pe_silent_bySkat666.exe'
- '%TEMP%\7ZipSfx.000\UltraIso.exe' /s
- %ProgramFiles%\UltraISO\lang\is-MM0QM.tmp
- %ProgramFiles%\UltraISO\lang\is-PQQDT.tmp
- %ProgramFiles%\UltraISO\lang\is-GC6UJ.tmp
- %ProgramFiles%\UltraISO\lang\is-SLK7T.tmp
- %ProgramFiles%\UltraISO\lang\is-7SK2L.tmp
- %ProgramFiles%\UltraISO\lang\is-6I8KO.tmp
- %ProgramFiles%\UltraISO\lang\is-IU7O9.tmp
- %ProgramFiles%\UltraISO\lang\is-QQKV9.tmp
- %ProgramFiles%\UltraISO\lang\is-1TJNP.tmp
- %ProgramFiles%\UltraISO\lang\is-PJFUR.tmp
- %ProgramFiles%\UltraISO\lang\is-H5JNE.tmp
- %ProgramFiles%\UltraISO\lang\is-Q6K6K.tmp
- %ProgramFiles%\UltraISO\lang\is-EFU2P.tmp
- %ProgramFiles%\UltraISO\lang\is-7ASDB.tmp
- %ProgramFiles%\UltraISO\lang\is-4I4IS.tmp
- %ProgramFiles%\UltraISO\lang\is-1M2FJ.tmp
- %ProgramFiles%\UltraISO\lang\is-6QVQM.tmp
- %ProgramFiles%\UltraISO\lang\is-12KLF.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO Readme.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO Revision History.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO Online Order.url
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO Web Site.url
- %TEMP%\server.exe
- %ProgramFiles%\UltraISO\unins000.dat
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\Uninstall UltraISO.lnk
- %HOMEPATH%\Desktop\UltraISO.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO Help.lnk
- %ProgramFiles%\UltraISO\lang\is-08632.tmp
- %ProgramFiles%\UltraISO\lang\is-TTC7U.tmp
- %ProgramFiles%\UltraISO\lang\is-QNIO9.tmp
- %ProgramFiles%\UltraISO\lang\is-PMR2H.tmp
- %ProgramFiles%\UltraISO\lang\is-G663H.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\UltraISO\UltraISO.lnk
- %ProgramFiles%\UltraISO\lang\is-O9UBI.tmp
- %ProgramFiles%\UltraISO\lang\is-D91M1.tmp
- %ProgramFiles%\UltraISO\is-C4RU0.tmp
- %ProgramFiles%\UltraISO\drivers\is-LHV5N.tmp
- %ProgramFiles%\UltraISO\is-B02KK.tmp
- %ProgramFiles%\UltraISO\is-P0KVA.tmp
- %CommonProgramFiles%\EZB Systems\is-G451H.tmp
- %ProgramFiles%\UltraISO\is-Q7O29.tmp
- %ProgramFiles%\UltraISO\drivers\is-81PJI.tmp
- %ProgramFiles%\UltraISO\drivers\is-R7OT1.tmp
- %TEMP%\is-ERH0U.tmp\_isetup\_shfoldr.dll
- %TEMP%\7ZipSfx.000\UltraIso.exe
- %TEMP%\RarSFX0\uiso9_pe_silent_bySkat666.exe
- %ALLUSERSPROFILE%\Application Data\ultraiso\ultraiso\1.0.0.0\temp\UltraIso.exe
- %ALLUSERSPROFILE%\Application Data\ultraiso\ultraiso\1.0.0.0\temp\UltraaIso.exe
- %TEMP%\is-073D4.tmp\uiso9_pe.tmp
- %TEMP%\is-ERH0U.tmp\_isetup\_RegDLL.tmp
- %TEMP%\RarSFX0\SKAT.exe
- %TEMP%\7ZipSfx.001\uiso9_pe.exe
- %ProgramFiles%\UltraISO\is-POEPB.tmp
- %ProgramFiles%\UltraISO\lang\is-T0G73.tmp
- %ProgramFiles%\UltraISO\lang\is-MS7AN.tmp
- %ProgramFiles%\UltraISO\lang\is-I3GR9.tmp
- %ProgramFiles%\UltraISO\lang\is-9MS41.tmp
- %ProgramFiles%\UltraISO\lang\is-GB1VM.tmp
- %ProgramFiles%\UltraISO\lang\is-N5LOK.tmp
- %ProgramFiles%\UltraISO\lang\is-1T023.tmp
- %ProgramFiles%\UltraISO\lang\is-7STH5.tmp
- %ProgramFiles%\UltraISO\lang\is-I4S5V.tmp
- %ProgramFiles%\UltraISO\lang\is-U354B.tmp
- %ProgramFiles%\UltraISO\lang\is-P99AM.tmp
- %ProgramFiles%\UltraISO\is-N0UCR.tmp
- %ProgramFiles%\UltraISO\is-9SAFN.tmp
- %ProgramFiles%\UltraISO\lang\is-ITBTM.tmp
- %ProgramFiles%\UltraISO\lang\is-IRT0B.tmp
- %ProgramFiles%\UltraISO\lang\is-2316J.tmp
- %ProgramFiles%\UltraISO\lang\is-LFEVD.tmp
- %TEMP%\is-073D4.tmp\uiso9_pe.tmp
- %TEMP%\is-ERH0U.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-ERH0U.tmp\_isetup\_RegDLL.tmp
- from %ProgramFiles%\UltraISO\lang\is-1TJNP.tmp to %ProgramFiles%\UltraISO\lang\lang_ar.dll
- from %ProgramFiles%\UltraISO\lang\is-4I4IS.tmp to %ProgramFiles%\UltraISO\lang\lang_lv.dll
- from %ProgramFiles%\UltraISO\lang\is-7ASDB.tmp to %ProgramFiles%\UltraISO\lang\lang_no.dll
- from %ProgramFiles%\UltraISO\lang\is-MM0QM.tmp to %ProgramFiles%\UltraISO\lang\lang_tw.dll
- from %ProgramFiles%\UltraISO\lang\is-SLK7T.tmp to %ProgramFiles%\UltraISO\lang\lang_cn.dll
- from %ProgramFiles%\UltraISO\lang\is-GC6UJ.tmp to %ProgramFiles%\UltraISO\lang\lang_si.dll
- from %ProgramFiles%\UltraISO\lang\is-PJFUR.tmp to %ProgramFiles%\UltraISO\lang\lang_by.dll
- from %ProgramFiles%\UltraISO\lang\is-EFU2P.tmp to %ProgramFiles%\UltraISO\lang\lang_yu.dll
- from %ProgramFiles%\UltraISO\lang\is-Q6K6K.tmp to %ProgramFiles%\UltraISO\lang\lang_gr.dll
- from %ProgramFiles%\UltraISO\lang\is-6QVQM.tmp to %ProgramFiles%\UltraISO\lang\lang_dk.dll
- from %ProgramFiles%\UltraISO\lang\is-1M2FJ.tmp to %ProgramFiles%\UltraISO\lang\lang_br.dll
- from %ProgramFiles%\UltraISO\lang\is-H5JNE.tmp to %ProgramFiles%\UltraISO\lang\lang_he.dll
- from %ProgramFiles%\UltraISO\lang\is-PQQDT.tmp to %ProgramFiles%\UltraISO\lang\lang_et.dll
- from %ProgramFiles%\UltraISO\lang\is-TTC7U.tmp to %ProgramFiles%\UltraISO\lang\lang_ir.dll
- from %ProgramFiles%\UltraISO\lang\is-08632.tmp to %ProgramFiles%\UltraISO\lang\lang_sr.dll
- from %ProgramFiles%\UltraISO\lang\is-PMR2H.tmp to %ProgramFiles%\UltraISO\lang\lang_lt.dll
- from %ProgramFiles%\UltraISO\lang\is-G663H.tmp to %ProgramFiles%\UltraISO\lang\lang_my.dll
- from %ProgramFiles%\UltraISO\lang\is-D91M1.tmp to %ProgramFiles%\UltraISO\lang\lang_vn.dll
- from %ProgramFiles%\UltraISO\lang\is-O9UBI.tmp to %ProgramFiles%\UltraISO\lang\lang_jp.dll
- from %ProgramFiles%\UltraISO\lang\is-7SK2L.tmp to %ProgramFiles%\UltraISO\lang\lang_fi.dll
- from %ProgramFiles%\UltraISO\lang\is-QQKV9.tmp to %ProgramFiles%\UltraISO\lang\lang_ct.dll
- from %ProgramFiles%\UltraISO\lang\is-IU7O9.tmp to %ProgramFiles%\UltraISO\lang\lang_sk.dll
- from %ProgramFiles%\UltraISO\lang\is-QNIO9.tmp to %ProgramFiles%\UltraISO\lang\lang_ro.dll
- from %ProgramFiles%\UltraISO\lang\is-12KLF.tmp to %ProgramFiles%\UltraISO\lang\lang_hr.dll
- from %ProgramFiles%\UltraISO\lang\is-6I8KO.tmp to %ProgramFiles%\UltraISO\lang\lang_mk.dll
- from %ProgramFiles%\UltraISO\lang\is-N5LOK.tmp to %ProgramFiles%\UltraISO\lang\lang_kr.dll
- from %ProgramFiles%\UltraISO\is-POEPB.tmp to %ProgramFiles%\UltraISO\License.txt
- from %ProgramFiles%\UltraISO\is-Q7O29.tmp to %ProgramFiles%\UltraISO\ultraiso.chm
- from %CommonProgramFiles%\EZB Systems\is-G451H.tmp to %CommonProgramFiles%\EZB Systems\lame_enc.dll
- from %ProgramFiles%\UltraISO\lang\is-U354B.tmp to %ProgramFiles%\UltraISO\lang\lang_de.dll
- from %ProgramFiles%\UltraISO\is-9SAFN.tmp to %ProgramFiles%\UltraISO\History.txt
- from %ProgramFiles%\UltraISO\is-N0UCR.tmp to %ProgramFiles%\UltraISO\Readme.txt
- from %ProgramFiles%\UltraISO\is-C4RU0.tmp to %ProgramFiles%\UltraISO\isoshell.dll
- from %ProgramFiles%\UltraISO\is-P0KVA.tmp to %ProgramFiles%\UltraISO\UltraISO.exe
- from %ProgramFiles%\UltraISO\is-B02KK.tmp to %ProgramFiles%\UltraISO\unins000.exe
- from %ProgramFiles%\UltraISO\drivers\is-R7OT1.tmp to %ProgramFiles%\UltraISO\drivers\IsoCmd.exe
- from %ProgramFiles%\UltraISO\drivers\is-81PJI.tmp to %ProgramFiles%\UltraISO\drivers\ISODrv64.sys
- from %ProgramFiles%\UltraISO\drivers\is-LHV5N.tmp to %ProgramFiles%\UltraISO\drivers\ISODrive.sys
- from %ProgramFiles%\UltraISO\lang\is-P99AM.tmp to %ProgramFiles%\UltraISO\lang\lang_fr.dll
- from %ProgramFiles%\UltraISO\lang\is-MS7AN.tmp to %ProgramFiles%\UltraISO\lang\lang_ru.dll
- from %ProgramFiles%\UltraISO\lang\is-T0G73.tmp to %ProgramFiles%\UltraISO\lang\lang_hu.dll
- from %ProgramFiles%\UltraISO\lang\is-9MS41.tmp to %ProgramFiles%\UltraISO\lang\lang_cz.dll
- from %ProgramFiles%\UltraISO\lang\is-GB1VM.tmp to %ProgramFiles%\UltraISO\lang\lang_tr.dll
- from %ProgramFiles%\UltraISO\lang\is-7STH5.tmp to %ProgramFiles%\UltraISO\lang\lang_bg.dll
- from %ProgramFiles%\UltraISO\lang\is-1T023.tmp to %ProgramFiles%\UltraISO\lang\lang_ua.dll
- from %ProgramFiles%\UltraISO\lang\is-ITBTM.tmp to %ProgramFiles%\UltraISO\lang\lang_pt.dll
- from %ProgramFiles%\UltraISO\lang\is-LFEVD.tmp to %ProgramFiles%\UltraISO\lang\lang_es.dll
- from %ProgramFiles%\UltraISO\lang\is-2316J.tmp to %ProgramFiles%\UltraISO\lang\lang_it.dll
- from %ProgramFiles%\UltraISO\lang\is-I3GR9.tmp to %ProgramFiles%\UltraISO\lang\lang_pl.dll
- from %ProgramFiles%\UltraISO\lang\is-I4S5V.tmp to %ProgramFiles%\UltraISO\lang\lang_se.dll
- from %ProgramFiles%\UltraISO\lang\is-IRT0B.tmp to %ProgramFiles%\UltraISO\lang\lang_nl.dll
- 'www.me####leupload.com':80
- 'wp#d':80
- http://www.me####leupload.com/76xp/Server.exe?do#############################################################################
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK www.me####leupload.com
- DNS ASK wp#d
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''