Technical Information
- [<HKLM>\Software\Classes\PROTOCOLS\Handler\vnd.ms.radio] 'CLSID' = '{3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020}'
- [<HKLM>\Software\Classes\vnd.ms.radio\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\mplayer2.exe" "%L"'
- %TEMP%\is-q2ohd.tmp\<File name>.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-jukn8.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-5bvcl.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-s281u.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-d5rvl.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-goikf.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-01ato.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-refic.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-556os.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-c72li.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-85ti9.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-00p43.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-ekk8e.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-teqma.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-v4sl1.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-cjncq.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-s6pr2.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-fhtmf.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-r0f4n.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-1956a.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-umlhg.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-1fppo.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-4hjk4.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-78jea.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-evk0h.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-su67t.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-74m9v.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-men6j.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\aurora media workshop\aurora media workshop.lnk
- %ProgramFiles(x86)%\aurora media workshop\nscompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-6p140.tmp
- %ProgramFiles(x86)%\aurora media workshop\amcompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-mba10.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-9r265.tmp
- %TEMP%\is-igcvi.tmp\_isetup\_setup64.tmp
- %TEMP%\is-igcvi.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\aurora media workshop\is-3rau8.tmp
- %WINDIR%\syswow64\is-b7t1u.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-e6d7m.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-foi4l.tmp
- %ProgramFiles(x86)%\aurora media workshop\skin\is-drmmn.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-kuhn9.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-pqlp9.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-9k2vk.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-6n9ck.tmp
- %WINDIR%\syswow64\is-4h7fr.tmp
- %WINDIR%\syswow64\is-resb7.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-l24c8.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-jtjao.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-sg81f.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-r29a7.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-r3oa9.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-0bmfq.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-03l5q.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-0etn2.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-gjrte.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-h3sej.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-h1mqn.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-lpp6f.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-8o5df.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-02cdr.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-am91r.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-to016.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-1v188.tmp
- %ProgramFiles(x86)%\aurora media workshop\unins000.dat
- from %ProgramFiles(x86)%\aurora media workshop\is-3rau8.tmp to %ProgramFiles(x86)%\aurora media workshop\unins000.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-5bvcl.tmp to %ProgramFiles(x86)%\aurora media workshop\cdrip.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-s281u.tmp to %ProgramFiles(x86)%\aurora media workshop\vcdimager.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-d5rvl.tmp to %ProgramFiles(x86)%\aurora media workshop\wmaudsdk.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-goikf.tmp to %ProgramFiles(x86)%\aurora media workshop\libsnd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-01ato.tmp to %ProgramFiles(x86)%\aurora media workshop\mp3lib.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-refic.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcrt.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-556os.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr70.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-c72li.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr71.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-85ti9.tmp to %ProgramFiles(x86)%\aurora media workshop\wmvprofileeditor.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-00p43.tmp to %ProgramFiles(x86)%\aurora media workshop\aspisetup.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-ekk8e.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\apix.vxd
- from %ProgramFiles(x86)%\aurora media workshop\is-r29a7.tmp to %ProgramFiles(x86)%\aurora media workshop\support.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-teqma.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\aspienum.vxd
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-cjncq.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-s6pr2.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-fhtmf.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-r0f4n.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-1956a.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winnt.reg
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-umlhg.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-1fppo.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-4hjk4.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-78jea.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\frcaspi.txt
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-evk0h.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-su67t.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-6p140.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomimage.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-jukn8.tmp to %ProgramFiles(x86)%\aurora media workshop\vorbis.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-mba10.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiovisualization2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-1v188.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiorecord2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-9r265.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudioplayer2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-e6d7m.tmp to %ProgramFiles(x86)%\aurora media workshop\wmfdist.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-foi4l.tmp to %ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe
- from %ProgramFiles(x86)%\aurora media workshop\skin\is-drmmn.tmp to %ProgramFiles(x86)%\aurora media workshop\skin\winaqua.smf
- from %ProgramFiles(x86)%\aurora media workshop\is-kuhn9.tmp to %ProgramFiles(x86)%\aurora media workshop\videoedit.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-pqlp9.tmp to %ProgramFiles(x86)%\aurora media workshop\mpeg2dmx.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-9k2vk.tmp to %ProgramFiles(x86)%\aurora media workshop\mpgdec.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-6n9ck.tmp to %ProgramFiles(x86)%\aurora media workshop\skinmagic.dll
- from %WINDIR%\syswow64\is-4h7fr.tmp to %WINDIR%\syswow64\gdiplus.dll
- from %WINDIR%\syswow64\is-resb7.tmp to %WINDIR%\syswow64\smd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-l24c8.tmp to %ProgramFiles(x86)%\aurora media workshop\libmpg-1.0.2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-jtjao.tmp to %ProgramFiles(x86)%\aurora media workshop\libmcl-4.5.0.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-74m9v.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-v4sl1.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\win9x.reg
- from %ProgramFiles(x86)%\aurora media workshop\is-sg81f.tmp to %ProgramFiles(x86)%\aurora media workshop\foxburner.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-0bmfq.tmp to %ProgramFiles(x86)%\aurora media workshop\msdxm.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-03l5q.tmp to %ProgramFiles(x86)%\aurora media workshop\directencode.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-0etn2.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomwave.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-gjrte.tmp to %ProgramFiles(x86)%\aurora media workshop\lame_enc.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-h3sej.tmp to %ProgramFiles(x86)%\aurora media workshop\help.chm
- from %ProgramFiles(x86)%\aurora media workshop\is-h1mqn.tmp to %ProgramFiles(x86)%\aurora media workshop\tips.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-lpp6f.tmp to %ProgramFiles(x86)%\aurora media workshop\license.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-8o5df.tmp to %ProgramFiles(x86)%\aurora media workshop\readme.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-02cdr.tmp to %ProgramFiles(x86)%\aurora media workshop\homepage.url
- from %ProgramFiles(x86)%\aurora media workshop\is-am91r.tmp to %ProgramFiles(x86)%\aurora media workshop\buynow.url
- from %ProgramFiles(x86)%\aurora media workshop\is-to016.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiofile2.dll
- from %WINDIR%\syswow64\is-b7t1u.tmp to %WINDIR%\syswow64\atl.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-r3oa9.tmp to %ProgramFiles(x86)%\aurora media workshop\setup.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-men6j.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\installaspi.bat
- ClassName: 'nuewduwbfbeuibewbf' WindowName: ''
- '%TEMP%\is-q2ohd.tmp\<File name>.tmp' /SL5="$13021A,13764055,215040,<Full path to file>"
- '%ProgramFiles(x86)%\aurora media workshop\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe' <File name>.exe
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\VideoEdit.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpeg2dmx.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpgdec.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\msdxm.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\DirectEncode.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\viscomwave.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioFile2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioPlayer2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioRecord2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioVisualization2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\WMVProfileEditor.ocx"