Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
Изменения в файловой системе
Создает следующие файлы
- C:\instsnd\macsound\asterik.wav
- %WINDIR%\media\macsnd\set20a0.tmp
- %WINDIR%\media\macsnd\set2070.tmp
- %WINDIR%\media\macsnd\set205f.tmp
- %WINDIR%\media\macsnd\set203f.tmp
- %WINDIR%\media\macsnd\set202f.tmp
- %WINDIR%\media\macsnd\set200e.tmp
- %WINDIR%\media\macsnd\set1fee.tmp
- %WINDIR%\media\macsnd\set1fce.tmp
- %WINDIR%\media\macsnd\set1fbd.tmp
- %WINDIR%\media\macsnd\set1f9d.tmp
- %WINDIR%\media\macsnd\set1f7d.tmp
- %WINDIR%\media\macsnd\set1f5c.tmp
- %WINDIR%\media\macsnd\set1f4c.tmp
- %WINDIR%\media\macsnd\set1f2c.tmp
- %WINDIR%\media\macsnd\set1f0b.tmp
- %WINDIR%\media\macsnd\set1eeb.tmp
- %WINDIR%\media\macsnd\set1ecb.tmp
- %WINDIR%\media\macsnd\set20df.tmp
- %WINDIR%\media\macsnd\set2100.tmp
- %WINDIR%\media\macsnd\set2110.tmp
- %WINDIR%\media\macsnd\set2131.tmp
- %WINDIR%\media\macsnd\set2346.tmp
- %WINDIR%\media\macsnd\set2336.tmp
- %WINDIR%\media\macsnd\set2315.tmp
- %WINDIR%\media\macsnd\set22f5.tmp
- %WINDIR%\media\macsnd\set22d5.tmp
- %WINDIR%\media\macsnd\set22b5.tmp
- %WINDIR%\media\macsnd\set22a4.tmp
- %WINDIR%\media\macsnd\set2284.tmp
- %WINDIR%\media\macsnd\set2243.tmp
- %WINDIR%\media\macsnd\set2263.tmp
- %WINDIR%\media\macsnd\set2233.tmp
- %WINDIR%\media\macsnd\set2212.tmp
- %WINDIR%\media\macsnd\set21e2.tmp
- %WINDIR%\media\macsnd\set21c2.tmp
- %WINDIR%\media\macsnd\set21a2.tmp
- %WINDIR%\media\macsnd\set2191.tmp
- %WINDIR%\media\macsnd\set2171.tmp
- %WINDIR%\media\macsnd\set2151.tmp
- %WINDIR%\media\macsnd\set2366.tmp
- C:\instsnd\del.bat
- C:\instsnd\macsound\windows xp start.wav
- C:\instsnd\macsound\windows exit.wav
- C:\instsnd\macsound\macsound.inf
- C:\instsnd\macsound\low battery.wav
- C:\instsnd\macsound\logon.wav
- C:\instsnd\macsound\logoff.wav
- C:\instsnd\macsound\exit windows.wav
- C:\instsnd\macsound\exclamation.wav
- C:\instsnd\macsound\error.wav
- C:\instsnd\macsound\empty recycle.wav
- C:\instsnd\macsound\device failed.wav
- C:\instsnd\macsound\device disconnect.wav
- C:\instsnd\macsound\device connect.wav
- C:\instsnd\macsound\default beep.wav
- C:\instsnd\macsound\critical stop.wav
- C:\instsnd\macsound\critical battery.wav
- C:\instsnd\macsound\contact online.wav
- C:\instsnd\macsound\complete navigation.wav
- C:\instsnd\macsound\close.wav
- C:\instsnd\macsound\maximize.wav
- C:\instsnd\macsound\menu command.wav
- C:\instsnd\macsound\menu popup.wav
- C:\instsnd\macsound\minimize.wav
- C:\instsnd\macsound\start windows.wav
- C:\instsnd\macsound\start navigation.wav
- C:\instsnd\macsound\show toolbar.wav
- C:\instsnd\macsound\select.wav
- C:\instsnd\macsound\restore up.wav
- C:\instsnd\macsound\restore down.wav
- C:\instsnd\macsound\receive request.wav
- C:\instsnd\macsound\receive call.wav
- C:\instsnd\macsound\program error.wav
- C:\instsnd\macsound\question.wav
- C:\instsnd\macsound\print complete.wav
- C:\instsnd\macsound\person leave.wav
- C:\instsnd\macsound\person join.wav
- C:\instsnd\macsound\open.wav
- C:\instsnd\macsound\new messages.wav
- C:\instsnd\macsound\new mail.wav
- C:\instsnd\macsound\new alert.wav
- C:\instsnd\macsound\move menu.wav
- C:\instsnd\macsound\system notifi.wav
- %WINDIR%\inf\set2387.tmp
Перемещает следующие файлы
- %WINDIR%\media\macsnd\set1ecb.tmp в %WINDIR%\media\macsnd\asterik.wav
- %WINDIR%\media\macsnd\set2171.tmp в %WINDIR%\media\macsnd\new alert.wav
- %WINDIR%\media\macsnd\set2191.tmp в %WINDIR%\media\macsnd\new mail.wav
- %WINDIR%\media\macsnd\set21a2.tmp в %WINDIR%\media\macsnd\new messages.wav
- %WINDIR%\media\macsnd\set21c2.tmp в %WINDIR%\media\macsnd\open.wav
- %WINDIR%\media\macsnd\set21e2.tmp в %WINDIR%\media\macsnd\person join.wav
- %WINDIR%\media\macsnd\set2212.tmp в %WINDIR%\media\macsnd\person leave.wav
- %WINDIR%\media\macsnd\set2233.tmp в %WINDIR%\media\macsnd\print complete.wav
- %WINDIR%\media\macsnd\set2243.tmp в %WINDIR%\media\macsnd\program error.wav
- %WINDIR%\media\macsnd\set2263.tmp в %WINDIR%\media\macsnd\question.wav
- %WINDIR%\media\macsnd\set2284.tmp в %WINDIR%\media\macsnd\receive call.wav
- %WINDIR%\media\macsnd\set22a4.tmp в %WINDIR%\media\macsnd\receive request.wav
- %WINDIR%\media\macsnd\set22b5.tmp в %WINDIR%\media\macsnd\restore down.wav
- %WINDIR%\media\macsnd\set22d5.tmp в %WINDIR%\media\macsnd\restore up.wav
- %WINDIR%\media\macsnd\set22f5.tmp в %WINDIR%\media\macsnd\select.wav
- %WINDIR%\media\macsnd\set2315.tmp в %WINDIR%\media\macsnd\show toolbar.wav
- %WINDIR%\media\macsnd\set2336.tmp в %WINDIR%\media\macsnd\start navigation.wav
- %WINDIR%\media\macsnd\set2346.tmp в %WINDIR%\media\macsnd\windows xp start.wav
- %WINDIR%\media\macsnd\set2151.tmp в %WINDIR%\media\macsnd\move menu.wav
- %WINDIR%\media\macsnd\set2366.tmp в %WINDIR%\media\macsnd\system notifi.wav
- %WINDIR%\media\macsnd\set2131.tmp в %WINDIR%\media\macsnd\minimize.wav
- %WINDIR%\media\macsnd\set2100.tmp в %WINDIR%\media\macsnd\menu command.wav
- %WINDIR%\media\macsnd\set1eeb.tmp в %WINDIR%\media\macsnd\close.wav
- %WINDIR%\media\macsnd\set1f0b.tmp в %WINDIR%\media\macsnd\complete navigation.wav
- %WINDIR%\media\macsnd\set1f2c.tmp в %WINDIR%\media\macsnd\contact online.wav
- %WINDIR%\media\macsnd\set1f4c.tmp в %WINDIR%\media\macsnd\critical battery.wav
- %WINDIR%\media\macsnd\set1f5c.tmp в %WINDIR%\media\macsnd\critical stop.wav
- %WINDIR%\media\macsnd\set1f7d.tmp в %WINDIR%\media\macsnd\default beep.wav
- %WINDIR%\media\macsnd\set1f9d.tmp в %WINDIR%\media\macsnd\device connect.wav
- %WINDIR%\media\macsnd\set1fbd.tmp в %WINDIR%\media\macsnd\device disconnect.wav
- %WINDIR%\media\macsnd\set1fce.tmp в %WINDIR%\media\macsnd\device failed.wav
- %WINDIR%\media\macsnd\set1fee.tmp в %WINDIR%\media\macsnd\empty recycle.wav
- %WINDIR%\media\macsnd\set200e.tmp в %WINDIR%\media\macsnd\error.wav
- %WINDIR%\media\macsnd\set202f.tmp в %WINDIR%\media\macsnd\exclamation.wav
- %WINDIR%\media\macsnd\set203f.tmp в %WINDIR%\media\macsnd\windows exit.wav
- %WINDIR%\media\macsnd\set205f.tmp в %WINDIR%\media\macsnd\logoff.wav
- %WINDIR%\media\macsnd\set2070.tmp в %WINDIR%\media\macsnd\logon.wav
- %WINDIR%\media\macsnd\set20a0.tmp в %WINDIR%\media\macsnd\low battery.wav
- %WINDIR%\media\macsnd\set20df.tmp в %WINDIR%\media\macsnd\maximize.wav
- %WINDIR%\media\macsnd\set2110.tmp в %WINDIR%\media\macsnd\menu popup.wav
- %WINDIR%\inf\set2387.tmp в %WINDIR%\inf\macsound.inf
Другое
Ищет следующие окна
- ClassName: 'EDIT' WindowName: ''
Запускает на исполнение
- '%WINDIR%\syswow64\cmd.exe' /Q /C RUNDLL32.EXE SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\instsnd\MACSound\MACSound.inf
- '%WINDIR%\syswow64\rundll32.exe' SETUPAPI.DLL,InstallHinfSection DefaultInstall 128 C:\instsnd\MACSound\MACSound.inf
- '%WINDIR%\syswow64\runonce.exe' -r
- '%WINDIR%\syswow64\grpconv.exe' -o
