Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] 'msacm.ac3acm' = 'AC3ACM.acm'
- [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] 'msacm.lameacm' = 'LameACM.acm'
- [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] 'vidc.XVID' = 'xvidvfw.dll'
- [HKLM\Software\Microsoft\Windows NT\CurrentVersion\Drivers32] 'VIDC.LAGS' = 'lagarith.dll'
- [HKLM\Software\Classes\WMP.DVR-MSFile\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"'
- [HKLM\Software\Classes\WMP.WTVFile\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"'
- [HKLM\Software\Classes\Applications\wmplayer.exe\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\wmplayer.exe" /Open "%L"'
Modifies file system
Creates the following files
- %TEMP%\rarsfx0\64bitaddon.exe
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-vhqed.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-48j0p.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-4o1th.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-j46ih.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-2ms05.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-b5jdo.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-grl74.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-6kr2k.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-skk2c.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-fgs7j.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-evg39.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-3daj9.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5v3ea.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-07v6i.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-joqt9.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5sl6l.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-h88h6.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5776u.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-8bskb.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-ib9c9.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-ck133.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-vm14l.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-ejif8.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\vistacodecpack\64bittools\video decoder configuration.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\vistacodecpack\64bittools\raw video decoder configuration.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\vistacodecpack\64bittools\audio decoder configuration.lnk
- <SYSTEM32>\embedded\is-2648k.tmp
- <SYSTEM32>\embedded\is-na2ig.tmp
- <SYSTEM32>\embedded\is-0g3it.tmp
- <SYSTEM32>\is-662er.tmp
- <SYSTEM32>\is-1i1ks.tmp
- <SYSTEM32>\is-4spbu.tmp
- <SYSTEM32>\is-6dvba.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-nqk0e.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-8d1gp.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-5qbbn.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-evcao.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-dufr7.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-2hm0i.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-cbdp2.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-0n0uq.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-oh27q.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-vl0cf.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-6oq8v.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-prkro.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-4gcio.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-gka21.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-rrihp.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-s4b0v.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-khga8.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-07oq5.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-22vgp.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-b8prp.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-n3qrd.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-g4na6.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-16lhd.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-50gq3.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-v3ot9.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-388qc.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-dv0er.tmp
- %TEMP%\is-cnte6.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp
- %TEMP%\is-cnte6.tmp\_isetup\_regdll.tmp
- %TEMP%\is-h7uf6.tmp\is-pp2sl.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-bp2re.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-vnvd2.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-pb10i.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-d0mth.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-bktkq.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-3k091.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-fsrgs.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-qulqo.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-v503v.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-3ook2.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-bqd6u.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-u8uci.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-7n08u.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-e3j78.tmp
- <SYSTEM32>\is-md7m6.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\vistacodecpack\64bittools\video encoder configuration.lnk
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-ipvnt.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-oqlvl.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-66iie.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-s3spl.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-dthb5.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-qo32g.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-5tocd.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-rdpfe.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-qrq0t.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\is-79inc.tmp
- %ProgramFiles(x86)%\vistacodecpack\filters64\unins000.dat
Deletes the following files
- %TEMP%\is-cnte6.tmp\_isetup\_regdll.tmp
- %TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp
- %TEMP%\is-cnte6.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-h7uf6.tmp\is-pp2sl.tmp
- %TEMP%\rarsfx0\64bitaddon.exe
Moves the following files
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-dv0er.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\unins000.exe
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-2ms05.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\matroskamuxer.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-b5jdo.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\libmplayer.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-grl74.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\libmpeg2_ff.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-6kr2k.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\libavcodec.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-skk2c.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.2052.sc
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-fgs7j.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1053.se
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-evg39.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1051.sk
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-4o1th.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\mp4splitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-j46ih.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\matroskasplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-07v6i.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1045.pl
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-joqt9.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1041.jp
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5sl6l.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1041.ja
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-h88h6.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1040.it
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5776u.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1038.hu
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-8bskb.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1036.fr
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-ck133.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1034.es
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-3daj9.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1049.ru
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-rdpfe.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\ultra low bitrate matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-48j0p.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\mpadecfilter.ax
- from <SYSTEM32>\embedded\is-0g3it.tmp to <SYSTEM32>\embedded\compiledcode.bin
- from <SYSTEM32>\is-662er.tmp to <SYSTEM32>\lagarith.dll
- from <SYSTEM32>\is-1i1ks.tmp to <SYSTEM32>\xvidcore.dll
- from <SYSTEM32>\is-4spbu.tmp to <SYSTEM32>\xvidvfw.dll
- from <SYSTEM32>\is-md7m6.tmp to <SYSTEM32>\lameacm.acm
- from <SYSTEM32>\is-6dvba.tmp to <SYSTEM32>\ac3acm.acm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-8d1gp.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\wavdest.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-5qbbn.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\vtsreader.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-evcao.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\vsfilter.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-dufr7.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\udpreader.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-2hm0i.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\tomsmocomp_ff.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-cbdp2.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\streamdrivethru.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-0n0uq.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ssfsplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-oh27q.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\shoutcastsource.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-vl0cf.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\oggsplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-ejif8.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\nutsplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-vm14l.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\mpegsplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-ib9c9.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1033.en
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-5v3ea.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1046.br
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-6oq8v.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1031.de
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-prkro.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1029.cz
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-4gcio.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1028.tc
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-07oq5.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\cg-animation matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-vnvd2.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\soulhunters v3.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-bp2re.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\pvcd.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-pb10i.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\mpeg.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-gka21.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\low bitrate matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-rrihp.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\hvs-good-picture.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-s4b0v.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\hvs-better-picture.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-khga8.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\hvs-best-picture.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-22vgp.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\bulletproof's high quality matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-3k091.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\standard.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-b8prp.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\bulletproof's heavy compression matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-n3qrd.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\andreas_einfache_99er.matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-g4na6.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\andreas_doppelte_99er.matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-16lhd.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\andreas_78er.matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-50gq3.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\avisplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-v3ot9.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\avi2ac3filter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-388qc.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\audioswitcher.ax
- from <SYSTEM32>\embedded\is-na2ig.tmp to <SYSTEM32>\embedded\wizardimage.bmp
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-vhqed.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\mpasplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-qrq0t.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\ultimate matrix.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-qo32g.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\dsmsplitter.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-d0mth.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\soulhunters v5.xcm
- from %ProgramFiles(x86)%\vistacodecpack\filters64\languages\is-bktkq.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\languages\ffdshow.1026.bg
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-fsrgs.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\flicsource.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-qulqo.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ffvdub.vdf
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-v503v.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ffdshow.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-3ook2.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_x264.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-bqd6u.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_wmv9.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-u8uci.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_tremor.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-7n08u.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_theora.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-e3j78.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_samplerate.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-79inc.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_realaac.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-nqk0e.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_libmad.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-ipvnt.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_libfaad2.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-oqlvl.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_libdts.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-66iie.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_liba52.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-s3spl.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\ff_kerneldeint.dll
- from %ProgramFiles(x86)%\vistacodecpack\filters64\is-dthb5.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\dtsac3source.ax
- from %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\is-5tocd.tmp to %ProgramFiles(x86)%\vistacodecpack\filters64\custom matrices\very low bitrate matrix.xcm
- from <SYSTEM32>\embedded\is-2648k.tmp to <SYSTEM32>\embedded\wizardsmallimage.bmp
Modifies the following files
- %TEMP%\wmsetup.log
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\desktop.ini
Substitutes the following files
- %ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
Creates and executes the following
- '%TEMP%\rarsfx0\64bitaddon.exe' /silent
- '%TEMP%\is-h7uf6.tmp\is-pp2sl.tmp' /SL4 $F017E "%TEMP%\RarSFX0\64bitAddon.exe" 5361547 73216 /silent
- '%TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp' 104 0x210
- '%TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp' 104 0x218
- '%TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp' 104 0x234
- '%TEMP%\is-cnte6.tmp\_isetup\_setup64.tmp' 104 0x21C
Executes the following
- '<SYSTEM32>\unregmp2.exe' /SwapTo:64
