Technical Information
- [<HKLM>\Software\Classes\PROTOCOLS\Handler\vnd.ms.radio] 'CLSID' = '{3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020}'
- [<HKLM>\Software\Classes\vnd.ms.radio\shell\open\command] '' = '"%ProgramFiles%\Windows Media Player\mplayer2.exe" "%L"'
- %TEMP%\is-jq4b1.tmp\<File name>.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-c1jcu.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-caios.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-t22tq.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-dts4p.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-euces.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-0s15j.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-640cb.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-rbqob.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-p4u7l.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-mnlkd.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-07glh.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-mqu1d.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-rv7s0.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-kc3t5.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-j5eg7.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-4m3ho.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-odl4l.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-fburh.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-leg73.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-2jiv3.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-sd4ed.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-4cmf9.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-25tot.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-aqc37.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-0icq0.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-iels6.tmp
- %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-v96oe.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\aurora media workshop\aurora media workshop.lnk
- %ProgramFiles(x86)%\aurora media workshop\nscompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-6t0p0.tmp
- %ProgramFiles(x86)%\aurora media workshop\amcompat.tlb
- %ProgramFiles(x86)%\aurora media workshop\is-h3378.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-0pqh2.tmp
- %TEMP%\is-cc117.tmp\_isetup\_setup64.tmp
- %TEMP%\is-cc117.tmp\_isetup\_iscrypt.dll
- %ProgramFiles(x86)%\aurora media workshop\is-kg86a.tmp
- %WINDIR%\syswow64\is-vu491.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-sgi4t.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-g46nh.tmp
- %ProgramFiles(x86)%\aurora media workshop\skin\is-kb1ot.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-gglku.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-mr0bb.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-b82em.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-d3jvk.tmp
- %WINDIR%\syswow64\is-comlh.tmp
- %WINDIR%\syswow64\is-r4399.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-sl6bd.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-sahi7.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-eot1i.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-47vgg.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-t216f.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-h0scf.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-raa3q.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-26jmn.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-cs4cj.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-nf3e4.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-qf0r0.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-b16ln.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-mr9uh.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-c50qt.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-khrpt.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-1olb7.tmp
- %ProgramFiles(x86)%\aurora media workshop\is-linqi.tmp
- %ProgramFiles(x86)%\aurora media workshop\unins000.dat
- from %ProgramFiles(x86)%\aurora media workshop\is-kg86a.tmp to %ProgramFiles(x86)%\aurora media workshop\unins000.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-caios.tmp to %ProgramFiles(x86)%\aurora media workshop\cdrip.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-t22tq.tmp to %ProgramFiles(x86)%\aurora media workshop\vcdimager.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-dts4p.tmp to %ProgramFiles(x86)%\aurora media workshop\wmaudsdk.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-euces.tmp to %ProgramFiles(x86)%\aurora media workshop\libsnd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-0s15j.tmp to %ProgramFiles(x86)%\aurora media workshop\mp3lib.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-640cb.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcrt.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-rbqob.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr70.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-p4u7l.tmp to %ProgramFiles(x86)%\aurora media workshop\msvcr71.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-mnlkd.tmp to %ProgramFiles(x86)%\aurora media workshop\wmvprofileeditor.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-07glh.tmp to %ProgramFiles(x86)%\aurora media workshop\aspisetup.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-mqu1d.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\apix.vxd
- from %ProgramFiles(x86)%\aurora media workshop\is-47vgg.tmp to %ProgramFiles(x86)%\aurora media workshop\support.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-rv7s0.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\aspienum.vxd
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-j5eg7.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-4m3ho.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-odl4l.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-fburh.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-leg73.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\winnt.reg
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-2jiv3.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\is-sd4ed.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winnt\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-4cmf9.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\aspi32.sys
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-25tot.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\frcaspi.txt
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-aqc37.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\winaspi.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-0icq0.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wnaspi32.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-6t0p0.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomimage.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-c1jcu.tmp to %ProgramFiles(x86)%\aurora media workshop\vorbis.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-h3378.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiovisualization2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-linqi.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiorecord2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-0pqh2.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudioplayer2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-sgi4t.tmp to %ProgramFiles(x86)%\aurora media workshop\wmfdist.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-g46nh.tmp to %ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe
- from %ProgramFiles(x86)%\aurora media workshop\skin\is-kb1ot.tmp to %ProgramFiles(x86)%\aurora media workshop\skin\winaqua.smf
- from %ProgramFiles(x86)%\aurora media workshop\is-gglku.tmp to %ProgramFiles(x86)%\aurora media workshop\videoedit.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-mr0bb.tmp to %ProgramFiles(x86)%\aurora media workshop\mpeg2dmx.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-b82em.tmp to %ProgramFiles(x86)%\aurora media workshop\mpgdec.ax
- from %ProgramFiles(x86)%\aurora media workshop\is-d3jvk.tmp to %ProgramFiles(x86)%\aurora media workshop\skinmagic.dll
- from %WINDIR%\syswow64\is-comlh.tmp to %WINDIR%\syswow64\gdiplus.dll
- from %WINDIR%\syswow64\is-r4399.tmp to %WINDIR%\syswow64\smd.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-sl6bd.tmp to %ProgramFiles(x86)%\aurora media workshop\libmpg-1.0.2.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-sahi7.tmp to %ProgramFiles(x86)%\aurora media workshop\libmcl-4.5.0.dll
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\is-iels6.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\winntdump\wowpost.exe
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\is-kc3t5.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\win9x\win9x.reg
- from %ProgramFiles(x86)%\aurora media workshop\is-eot1i.tmp to %ProgramFiles(x86)%\aurora media workshop\foxburner.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-h0scf.tmp to %ProgramFiles(x86)%\aurora media workshop\msdxm.ocx
- from %ProgramFiles(x86)%\aurora media workshop\is-raa3q.tmp to %ProgramFiles(x86)%\aurora media workshop\directencode.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-26jmn.tmp to %ProgramFiles(x86)%\aurora media workshop\viscomwave.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-cs4cj.tmp to %ProgramFiles(x86)%\aurora media workshop\lame_enc.dll
- from %ProgramFiles(x86)%\aurora media workshop\is-nf3e4.tmp to %ProgramFiles(x86)%\aurora media workshop\help.chm
- from %ProgramFiles(x86)%\aurora media workshop\is-qf0r0.tmp to %ProgramFiles(x86)%\aurora media workshop\tips.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-b16ln.tmp to %ProgramFiles(x86)%\aurora media workshop\license.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-mr9uh.tmp to %ProgramFiles(x86)%\aurora media workshop\readme.txt
- from %ProgramFiles(x86)%\aurora media workshop\is-c50qt.tmp to %ProgramFiles(x86)%\aurora media workshop\homepage.url
- from %ProgramFiles(x86)%\aurora media workshop\is-khrpt.tmp to %ProgramFiles(x86)%\aurora media workshop\buynow.url
- from %ProgramFiles(x86)%\aurora media workshop\is-1olb7.tmp to %ProgramFiles(x86)%\aurora media workshop\nctaudiofile2.dll
- from %WINDIR%\syswow64\is-vu491.tmp to %WINDIR%\syswow64\atl.exe
- from %ProgramFiles(x86)%\aurora media workshop\is-t216f.tmp to %ProgramFiles(x86)%\aurora media workshop\setup.ini
- from %ProgramFiles(x86)%\aurora media workshop\forceaspi17\is-v96oe.tmp to %ProgramFiles(x86)%\aurora media workshop\forceaspi17\installaspi.bat
- ClassName: 'nuewduwbfbeuibewbf' WindowName: ''
- '%TEMP%\is-jq4b1.tmp\<File name>.tmp' /SL5="$12022A,13764055,215040,<Full path to file>"
- '%ProgramFiles(x86)%\aurora media workshop\wmfdist.exe' /Q:A /R:N
- '%ProgramFiles(x86)%\aurora media workshop\aurora media workshop.exe' <File name>.exe
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\VideoEdit.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpeg2dmx.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\mpgdec.ax"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\msdxm.ocx"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\DirectEncode.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\viscomwave.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioFile2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioPlayer2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioRecord2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\NCTAudioVisualization2.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Aurora Media Workshop\WMVProfileEditor.ocx"