Trojan.DownLoader10.21853

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] 'msacm.lameacm' = 'LameACM.acm'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] 'vidc.tscc' = 'tsccvid.dll'
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32] 'vidc.XVID' = 'xvidvfw.dll'
[<HKLM>\SOFTWARE\Classes\WMP11.AssocFile.XESC\shell\open\command] '' = '"%PROGRAM_FILES%\Windows Media Player\wmplayer.exe" "%1"'

Malicious functions:

Creates and executes the following:

'%TEMP%\tscc.exe' /s
'%TEMP%\GLBA84F.tmp' /s4736 %TEMP%\tscc.exe
'%TEMP%\xvid.exe' /verysilent
'%TEMP%\is-S2UJH.tmp\xvid.tmp' /SL5="$1018A,486899,145920,%TEMP%\xvid.exe" /verysilent

Executes the following:

'<SYSTEM32>\taskhost.exe'
'<SYSTEM32>\runonce.exe' -r
'<SYSTEM32>\grpconv.exe' -o
'<SYSTEM32>\regsvr32.exe' /s <SYSTEM32>\lame.ax
'<SYSTEM32>\DllHost.exe' /Processid:{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}
'<SYSTEM32>\rundll32.exe' setupapi.dll,InstallHinfSection DefaultInstall 0 .\LameACM.inf
'<SYSTEM32>\regsvr32.exe' /s "<SYSTEM32>\xvid.ax"
'<SYSTEM32>\wermgr.exe' -queuereporting
'<SYSTEM32>\msiexec.exe' /i "%TEMP%\EEScreen_en.msi" /q
'<SYSTEM32>\cmd.exe' /c ""%TEMP%\lameACM\install.bat" "
'<SYSTEM32>\msiexec.exe' /V

Modifies file system :

Creates the following files:

%PROGRAM_FILES%\Xvid\Quantization Matrices\is-KFOPO.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-QDJE0.tmp
%PROGRAM_FILES%\Xvid\Links\is-KN7PG.tmp
%PROGRAM_FILES%\Xvid\Links\is-0LEBL.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-AA7TP.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-4KV11.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-KJ3O4.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-5B3OP.tmp
%PROGRAM_FILES%\Xvid\Links\is-INJ3V.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\StatsReader 2.1.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\VIDC Cleaner.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Quantization Matrices.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\StatsReader Notes.lnk
%PROGRAM_FILES%\Xvid\Links\is-SS3UC.tmp
%PROGRAM_FILES%\Xvid\Links\is-ERGIG.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Release Notes.lnk
%PROGRAM_FILES%\Xvid\Links\is-1BDA1.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-PUU08.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-U6IQV.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-B1ARK.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-2Q98U.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-N7VBI.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-4K8T1.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-KO48I.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-AVF6H.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-4B8T9.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-HS94Q.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-V8SU7.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-5V924.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-82450.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-59FP4.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-IALQS.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-DCANO.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-CUO3G.tmp
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Nic's FourCC Changer.lnk
%TEMP%\GLCA9B6.tmp
%TEMP%\GLBA84F.tmp
<SYSTEM32>\~GLH0001.TMP
%TEMP%\~GLH0000.TMP
%WINDIR%\Installer\c9273.msi
%PROGRAM_FILES%\Microsoft Expression\Encoder 4\Microsoft.Expression.Encoder.EEScreen.Codec.dll
%TEMP%\tscc.exe
%WINDIR%\Installer\{F940D859-DDB5-4067-82E2-3C8D02F8E09F}\Application
<SYSTEM32>\temp.000
<SYSTEM32>\SETB931.tmp
<SYSTEM32>\SETB8B4.tmp
<SYSTEM32>\lame.ax
%WINDIR%\inf\SETB952.tmp
%TEMP%\lameACM\lameACM.acm
%TEMP%\lameACM\lame_acm.xml
%TEMP%\lameACM\install.bat
%TEMP%\lameACM\LameACM.inf
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\Doom10.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\Doom9.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\Jawor's Homepage.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\VideoAudio.PL.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Configure Encoder.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Configure Decoder.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\ffdshow Homepage.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Web Links\Xvid Homepage.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Xvid\Uninstall Xvid.lnk
C:\System Volume Information\Syscache.hve
%TEMP%\Tar9453.tmp
C:\Config.Msi\c9272.rbs
%WINDIR%\Installer\MSI9FBA.tmp
%TEMP%\EEScreen_en.msi
%PROGRAM_FILES%\Xvid\unins000.dat
%TEMP%\Cab9452.tmp
%WINDIR%\Installer\c926f.msi
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-QR2UN.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-D8VB8.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-7E6VC.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-M5229.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-7FP96.tmp
%PROGRAM_FILES%\Xvid\is-IETT5.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-LCPMQ.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-HG5BI.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-I3M90.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-Q4GUG.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-TML35.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-Q9RME.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-1TMAE.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-3K500.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-VLSIF.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-QODM5.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-323R0.tmp
%TEMP%\is-13TF5.tmp\_isetup\_shfoldr.dll
%TEMP%\is-S2UJH.tmp\xvid.tmp
<SYSTEM32>\is-H8UC1.tmp
%PROGRAM_FILES%\Xvid\is-EKQM9.tmp
%TEMP%\vg8.6.2.37411.dat
%TEMP%\v~f29BCC9B1.tmp
%TEMP%\xvid.exe
%PROGRAM_FILES%\Xvid\is-15GK4.tmp
%PROGRAM_FILES%\Xvid\is-BGI73.tmp
<SYSTEM32>\is-75K2U.tmp
%PROGRAM_FILES%\Xvid\is-VCUKJ.tmp
%PROGRAM_FILES%\Xvid\is-F1K64.tmp
%PROGRAM_FILES%\Xvid\is-EQC1M.tmp
%PROGRAM_FILES%\Xvid\is-DFJ4R.tmp
<SYSTEM32>\is-6EQVU.tmp
%PROGRAM_FILES%\Xvid\is-HRE06.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-A6J3I.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-VC2K2.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-RA39I.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-JLR4C.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-A8K1O.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-TM9I6.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-AMPJD.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-UGQVH.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-CUBPC.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-JMM8Q.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-AD3E3.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-SGUJN.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-BM2PI.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-DMP84.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-GUTD2.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-BJSJA.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-LULHT.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-B0F80.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-IS3BR.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-0DBOP.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-AFK2F.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-BQVJD.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-5IJ2F.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-9EURG.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-PUAQD.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-DSVHJ.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-HB6S2.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-FS5DU.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-4CEPI.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-EKIVM.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-VOGL6.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-0C7BK.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-MHB39.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-F6VF4.tmp
%PROGRAM_FILES%\Xvid\Quantization Matrices\is-GC0AG.tmp

Deletes the following files:

%TEMP%\GLCA9B6.tmp
%TEMP%\GLBA84F.tmp
<SYSTEM32>\~GLH0001.TMP
%TEMP%\GLFAD12.tmp
%TEMP%\tscc.exe
%TEMP%\lameACM\LameACM.inf
%TEMP%\lameACM\lame_acm.xml
%TEMP%\lameACM\install.bat
%TEMP%\lameACM\lameACM.acm
%TEMP%\EEScreen_en.msi
%TEMP%\xvid.exe
%TEMP%\Cab9452.tmp
%TEMP%\is-13TF5.tmp\_isetup\_shfoldr.dll
%TEMP%\is-S2UJH.tmp\xvid.tmp
%TEMP%\Tar9453.tmp
%WINDIR%\Installer\c926f.msi
%WINDIR%\Installer\c9271.ipi
%WINDIR%\Installer\MSI9FBA.tmp
C:\Config.Msi\c9272.rbs

Moves the following files:

from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-N7VBI.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\KVCD_448x320_CQ65.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-AVF6H.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Low Bitrate Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-KO48I.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Max GE 1900 kbps.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-DMP84.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Kika Trickfilm Low.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-BM2PI.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\KVCD Notch.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-4K8T1.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\KVCD_320x432_CQ65.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-B1ARK.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\MPEG Standard.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-4B8T9.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Packed DVD by Fl0ppy.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-IALQS.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Professional.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-U6IQV.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Max LT 1900 kbps.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-PUU08.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\mb1 DV 720x576 min 2000 avg 4000 max 5000.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-2Q98U.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\mb1 interlaced DV.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-A8K1O.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\heini_mr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-JLR4C.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\HVS Best Picture.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-JMM8Q.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\HVS Better Picture.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-UGQVH.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Flat 8-16.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-RA39I.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Fox Home Entertainment.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-VC2K2.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\heini_lr_6o9.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-LULHT.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Jawor's 2CD Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-SGUJN.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Jawor's ZSM.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-AD3E3.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Kika Trickfilm High.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-BJSJA.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\HVS Good Picture.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-GUTD2.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Hybrid8AQ.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-B0F80.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Jawor's 1CD Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-59FP4.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\PVCD.xcm
from %PROGRAM_FILES%\Xvid\Links\is-ERGIG.tmp to %PROGRAM_FILES%\Xvid\Links\jaworshomepage.url
from %PROGRAM_FILES%\Xvid\Links\is-SS3UC.tmp to %PROGRAM_FILES%\Xvid\Links\videoaudiopl.url
from %PROGRAM_FILES%\Xvid\Links\is-1BDA1.tmp to %PROGRAM_FILES%\Xvid\Links\xvidhomepage.url
from %PROGRAM_FILES%\Xvid\Links\is-0LEBL.tmp to %PROGRAM_FILES%\Xvid\Links\doom10.url
from %PROGRAM_FILES%\Xvid\Links\is-KN7PG.tmp to %PROGRAM_FILES%\Xvid\Links\doom9.url
from %PROGRAM_FILES%\Xvid\Links\is-INJ3V.tmp to %PROGRAM_FILES%\Xvid\Links\ffdshowhomepage.url
from <SYSTEM32>\SETB8B4.tmp to <SYSTEM32>\LameACM.acm
from <SYSTEM32>\SETB931.tmp to <SYSTEM32>\lame_acm.xml
from %WINDIR%\inf\SETB952.tmp to %WINDIR%\inf\LameACM.inf
from %TEMP%\~GLH0000.TMP to %TEMP%\GLFAD12.tmp
from <SYSTEM32>\temp.000 to <SYSTEM32>\~GLH0002.TMP
from <SYSTEM32>\~GLH0002.TMP to <SYSTEM32>\tsccvid.dll
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-HS94Q.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Soulhunters v3 (MPEG-EX).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-82450.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Soulhunters v5 (HVS1).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-5V924.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Soulhunters v6 (HVS2).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-CUO3G.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Selur - high datarate.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-DCANO.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Selur's Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-V8SU7.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Semi-insane.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-KJ3O4.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\TMPEGEnc CG.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-QDJE0.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Ultimate Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-KFOPO.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Y.A.C.Q.M.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-4KV11.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Soulhunters v7 (XHQ).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-AA7TP.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Soulhunters v8 (HSV3).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-5B3OP.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Standard.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-D8VB8.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Andreas 78er Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-QR2UN.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Andreas doppelte 99er Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-M5229.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Andreas einfache 99er Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-7FP96.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\28DaysLater.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-HG5BI.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\6of9 -vs- Jawors.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-LCPMQ.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Acailas.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-3K500.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Angel BestVeryLow.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-323R0.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Angel SVCD 1CD 2.35 avg800 max1500.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-QODM5.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Angel SVCD 4-3 SVCD Interlaced 34.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-7E6VC.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Andreas Matrix fuer DivX Quelle.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-I3M90.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Andreas SVCD Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-VLSIF.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Angel BestLow.xcm
from %PROGRAM_FILES%\Xvid\is-DFJ4R.tmp to %PROGRAM_FILES%\Xvid\vidccleaner.exe
from %PROGRAM_FILES%\Xvid\is-EQC1M.tmp to %PROGRAM_FILES%\Xvid\StatsReader.exe
from %PROGRAM_FILES%\Xvid\is-HRE06.tmp to %PROGRAM_FILES%\Xvid\statsreader.txt
from %PROGRAM_FILES%\Xvid\is-EKQM9.tmp to %PROGRAM_FILES%\Xvid\unins000.exe
from <SYSTEM32>\is-H8UC1.tmp to <SYSTEM32>\xvidvfw.dll
from %PROGRAM_FILES%\Xvid\is-15GK4.tmp to %PROGRAM_FILES%\Xvid\releasenotes.txt
from %PROGRAM_FILES%\Xvid\is-F1K64.tmp to %PROGRAM_FILES%\Xvid\AviC.exe
from %PROGRAM_FILES%\Xvid\is-VCUKJ.tmp to %PROGRAM_FILES%\Xvid\license.txt
from %PROGRAM_FILES%\Xvid\is-IETT5.tmp to %PROGRAM_FILES%\Xvid\xvid.ico
from <SYSTEM32>\is-6EQVU.tmp to <SYSTEM32>\xvidcore.dll
from <SYSTEM32>\is-75K2U.tmp to <SYSTEM32>\xvid.ax
from %PROGRAM_FILES%\Xvid\is-BGI73.tmp to %PROGRAM_FILES%\Xvid\xvid_encraw.exe
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-TML35.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Angel SVCD 4-3 SVCD Interlaced 99.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-GC0AG.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\EQM_v2.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-F6VF4.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3ehr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-4CEPI.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3hr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-HB6S2.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\EQM - AutoGK sharp.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-MHB39.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\EQM2 -vs- SixOfNine.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-0C7BK.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\EQM_v1.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-AMPJD.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3ulr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-TM9I6.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3ulr_rev2.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-CUBPC.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\EthanoliX Four Rooms.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-FS5DU.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3lr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-VOGL6.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3uhr.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-EKIVM.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\eqm_v3uhr_rev2.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-A6J3I.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Bach1.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-9EURG.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Bulletproof's Heavy Compression Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-5IJ2F.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Bulletproof's High Quality Matrix.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-Q4GUG.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Audionut's HQ.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-1TMAE.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Audionut's.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-Q9RME.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\AVAMAT6.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-IS3BR.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Didees SixOfNine HVS.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-BQVJD.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Didees SixOfNine Max=20.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-AFK2F.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\Didees SixOfNine Max=24.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-DSVHJ.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\CCE Smooth (CG etc.).xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-PUAQD.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\CCE Ultra low bitrate.xcm
from %PROGRAM_FILES%\Xvid\Quantization Matrices\is-0DBOP.tmp to %PROGRAM_FILES%\Xvid\Quantization Matrices\CCE Very low bitrate.xcm

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'OleMainThreadWndClass' WindowName: '(null)'

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial