Technical Information
- [<HKLM>\Software\Classes\UltraISO\shell\open\command] '' = '"%ProgramFiles(x86)%\UltraISO\UltraISO.exe" "%1"'
- [<HKLM>\Software\Classes\binimage\shell\open\command] '' = '"%ProgramFiles(x86)%\UltraISO\UltraISO.exe" "%1"'
- [<HKLM>\System\CurrentControlSet\Services\ISODrive] 'Start' = '00000001'
- [<HKLM>\System\CurrentControlSet\Services\ISODrive] 'ImagePath' = '%ProgramFiles(x86)%\UltraISO\drivers\ISODrv64.sys'
- %TEMP%\nsq75c5.tmp\uac.dll
- %ProgramFiles(x86)%\ultraiso\lang\is-btkvm.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-9cn8b.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-k2ddu.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-1qctt.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-60loh.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-p6rht.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-bqci1.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-40gkk.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-2b9ra.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-06458.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-j8384.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-b95p4.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-dols0.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-g5mok.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-05h1c.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-67i7j.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-u7ki7.tmp
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso web site.url
- %TEMP%\rarsfx0\ultraiso premium 9.7.2 build 3561 retail.jpg
- %ProgramFiles(x86)%\ultraiso\lang\is-7o4cd.tmp
- %TEMP%\rarsfx0\open.bat
- %ProgramFiles(x86)%\ultraiso\uikey.ini
- %TEMP%\nsq75c5.tmp\nact.dll
- %ProgramFiles(x86)%\ultraiso\unins000.dat
- C:\users\public\desktop\ultraiso.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\uninstall ultraiso.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso revision history.lnk
- %ProgramFiles(x86)%\ultraiso\lang\is-dlep3.tmp
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso readme.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso online order.url
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso help.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\ultraiso\ultraiso.lnk
- %ProgramFiles(x86)%\ultraiso\lang\is-d2inf.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-m29dg.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-qcbqi.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-2q7n7.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-0u5uh.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-88fm9.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-gi967.tmp
- %CommonProgramFiles(x86)%\ezb systems\is-88332.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-i7obh.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-jq1lh.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-duesv.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-8f2rn.tmp
- %ProgramFiles(x86)%\ultraiso\is-c3dqt.tmp
- %ProgramFiles(x86)%\ultraiso\is-i14a0.tmp
- %ProgramFiles(x86)%\ultraiso\is-k4rss.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-o2e1p.tmp
- %TEMP%\is-nbko9.tmp\_isetup\_setup64.tmp
- %TEMP%\rarsfx0\ultraiso premium 9.7.2 build 3561 retail.exe
- %TEMP%\rarsfx0\silent switch.bat
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\delete temp.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\ultraiso premium 9.7.2 build 3561 silent.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\key.64x.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\key.32x.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\(prooonet).ultraiso.exe
- %TEMP%\is-s641e.tmp\ultraiso premium 9.7.2 build 3561 retail.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-0jlgq.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-trlqu.tmp
- %ProgramFiles(x86)%\ultraiso\is-s07m7.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-trv0o.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-2gjcc.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-bma6h.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-k9ebd.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-asau8.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-hl1d8.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-utcot.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-6ov33.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-r9il9.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-ds5f6.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-i58rg.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-uokoq.tmp
- %ProgramFiles(x86)%\ultraiso\lang\is-0rqbn.tmp
- %ProgramFiles(x86)%\ultraiso\is-ik9sb.tmp
- %ProgramFiles(x86)%\ultraiso\is-54i3h.tmp
- %ProgramFiles(x86)%\ultraiso\is-pv3q7.tmp
- %ProgramFiles(x86)%\ultraiso\drivers\is-a6nq9.tmp
- %TEMP%\rarsfx0\delete temp.bat
- %TEMP%\is-nbko9.tmp\_isetup\_setup64.tmp
- %TEMP%\is-s641e.tmp\ultraiso premium 9.7.2 build 3561 retail.tmp
- %TEMP%\rarsfx0\silent switch.bat
- %TEMP%\rarsfx0\ultraiso premium 9.7.2 build 3561 retail.exe
- %TEMP%\rarsfx0\open.bat
- %TEMP%\rarsfx0\ultraiso premium 9.7.2 build 3561 retail.jpg
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\ultraiso premium 9.7.2 build 3561 silent.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\(prooonet).ultraiso.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\key.32x.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\key.64x.exe
- %TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\delete temp.exe
- %TEMP%\rarsfx0\delete temp.bat
- %TEMP%\nsq75c5.tmp\nact.dll
- %TEMP%\nsq75c5.tmp\uac.dll
- from %ProgramFiles(x86)%\ultraiso\is-k4rss.tmp to %ProgramFiles(x86)%\ultraiso\unins000.exe
- from %ProgramFiles(x86)%\ultraiso\lang\is-gi967.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_gr.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-dlep3.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_yu.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-67i7j.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_by.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-05h1c.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_he.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-g5mok.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_br.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-dols0.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_dk.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-b95p4.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_no.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-j8384.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_lv.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-06458.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ar.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-u7ki7.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_si.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-2b9ra.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_cn.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-p6rht.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_et.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-m29dg.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_my.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-60loh.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_sk.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-1qctt.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ct.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-k2ddu.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_fi.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-9cn8b.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_mk.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-btkvm.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_hr.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-40gkk.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ro.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-0u5uh.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_lt.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-88fm9.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_sr.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-7o4cd.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ir.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-2q7n7.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_jp.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-qcbqi.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_vn.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-6ov33.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_kr.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-bqci1.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_tw.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-trlqu.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_tr.dll
- from %ProgramFiles(x86)%\ultraiso\is-54i3h.tmp to %ProgramFiles(x86)%\ultraiso\readme.txt
- from %ProgramFiles(x86)%\ultraiso\is-i14a0.tmp to %ProgramFiles(x86)%\ultraiso\ultraiso.exe
- from %ProgramFiles(x86)%\ultraiso\is-c3dqt.tmp to %ProgramFiles(x86)%\ultraiso\isoshl64.dll
- from %ProgramFiles(x86)%\ultraiso\drivers\is-8f2rn.tmp to %ProgramFiles(x86)%\ultraiso\drivers\isodrive.sys
- from %ProgramFiles(x86)%\ultraiso\drivers\is-duesv.tmp to %ProgramFiles(x86)%\ultraiso\drivers\isodrv64.sys
- from %ProgramFiles(x86)%\ultraiso\drivers\is-jq1lh.tmp to %ProgramFiles(x86)%\ultraiso\drivers\isocmd.exe
- from %ProgramFiles(x86)%\ultraiso\drivers\is-i7obh.tmp to %ProgramFiles(x86)%\ultraiso\drivers\bootpart.sys
- from %ProgramFiles(x86)%\ultraiso\drivers\is-o2e1p.tmp to %ProgramFiles(x86)%\ultraiso\drivers\bootpt64.sys
- from %ProgramFiles(x86)%\ultraiso\drivers\is-a6nq9.tmp to %ProgramFiles(x86)%\ultraiso\drivers\bootpart.exe
- from %CommonProgramFiles(x86)%\ezb systems\is-88332.tmp to %CommonProgramFiles(x86)%\ezb systems\lame_enc.dll
- from %ProgramFiles(x86)%\ultraiso\is-s07m7.tmp to %ProgramFiles(x86)%\ultraiso\ultraiso.chm
- from %ProgramFiles(x86)%\ultraiso\is-pv3q7.tmp to %ProgramFiles(x86)%\ultraiso\license.txt
- from %ProgramFiles(x86)%\ultraiso\is-ik9sb.tmp to %ProgramFiles(x86)%\ultraiso\history.txt
- from %ProgramFiles(x86)%\ultraiso\lang\is-2gjcc.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ua.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-0rqbn.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_de.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-uokoq.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_fr.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-i58rg.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_it.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-ds5f6.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_es.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-0jlgq.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_pt.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-r9il9.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_nl.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-utcot.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_se.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-hl1d8.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_pl.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-asau8.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_cz.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-k9ebd.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_hu.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-bma6h.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_ru.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-trv0o.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_bg.dll
- from %ProgramFiles(x86)%\ultraiso\lang\is-d2inf.tmp to %ProgramFiles(x86)%\ultraiso\lang\lang_id.dll
- http://www.go#####analytics.com/collect
- DNS ASK go#####analytics.com
- ClassName: 'EDIT' WindowName: ''
- '%TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\ultraiso premium 9.7.2 build 3561 silent.exe'
- '%TEMP%\rarsfx0\ultraiso premium 9.7.2 build 3561 retail.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%TEMP%\is-s641e.tmp\ultraiso premium 9.7.2 build 3561 retail.tmp' /SL5="$1A024C,4166942,128000,%TEMP%\RarSFX0\UltraISO Premium 9.7.2 Build 3561 Retail.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ProgramFiles(x86)%\ultraiso\drivers\isocmd.exe' -i
- '%TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\key.64x.exe' /qn /norestart
- '%TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\(prooonet).ultraiso.exe'
- '%TEMP%\prooonet.ultraiso premium 9.7.2 build 3561\delete temp.exe'
- '%ProgramFiles(x86)%\ultraiso\drivers\isocmd.exe' -i' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\Silent Switch.bat" "
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\UltraISO\isoshl64.dll"
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\open.bat" "
- '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\RarSFX0\delete temp.bat" "