Technical Information
Malicious functions:
Terminates or attempts to terminate
the following user processes:
- chrome.exe
- iexplore.exe
- firefox.exe
Modifies file system:
Creates the following files:
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L4ONV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-FKVL9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-4PSAB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HUIPD.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-V2UVM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-Q79S3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-5AEJ5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P12SN.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-68661.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-NP2H3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-R2EOJ.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-0I2RH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-47D49.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-KJOF1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-U7D7N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-3EVTI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CLH6B.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-G75KM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-C7J9N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-2OO3B.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-NCCUR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MGN9M.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\TunesKit Spotify Converter.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\Uninstall TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H9G7T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-G1IHT.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-VROCM.tmp
- %TEMP%\RarSFX0\reg.reg
- %TEMP%\RarSFX0\reg64.reg
- %TEMP%\RarSFX0\install.cmd
- %HOMEPATH%\Desktop\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\unins000.dat
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-P1D0J.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MGO8R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-K1T9E.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-V264P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-LC0AK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DO90K.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4GT4S.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-C9EHP.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-327NB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-BLI9J.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2IESM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-GECS4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-7SQF9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-4QMQB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-I76VR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-RECU7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-LS267.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-D7US3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6D21N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-TJ32C.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-O4D22.tmp
- %TEMP%\is-QLFED.tmp\setup.tmp
- %WINDIR%\Temp\Temp_1\restfiles\BlackbunnyInstall.gif
- %TEMP%\aut3.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- %WINDIR%\Temp\Temp_1\restfiles\Blackbunny.gif
- %TEMP%\aut5.tmp
- %WINDIR%\Temp\Temp_1\restfiles\reg.exe
- %WINDIR%\Temp\Temp_1\restfiles\setup.exe
- %WINDIR%\Temp\Temp_1\restfiles\BlackbunnyEnd.gif
- %TEMP%\aut4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-3F25L.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6LPLO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-1P9I0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-MO2C5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-UAT1B.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-P3MQ3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-19LHA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-83UO0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-0CLUK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-E99SE.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-7N82U.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-03B67.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6O00T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-70AA0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-O2N45.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-DGU2O.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-J7AME.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-PMHM6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-680TL.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-5VTJI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-60QLL.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-KS579.tmp
Deletes the following files:
- %TEMP%\aut4.tmp
- %TEMP%\aut5.tmp
- %TEMP%\is-QLFED.tmp\setup.tmp
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
Moves the following files:
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-4PSAB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L4ONV.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HUIPD.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-V2UVM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-NP2H3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P12SN.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-FKVL9.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-68661.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-R2EOJ.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-47D49.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-2OO3B.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-KJOF1.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-0I2RH.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CLH6B.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-G75KM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-NCCUR.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-C7J9N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\de\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4GT4S.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-C9EHP.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2IESM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-327NB.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-VROCM.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H9G7T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-P1D0J.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-G1IHT.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-BLI9J.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MGN9M.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-LC0AK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\messagebox.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-Q79S3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-5AEJ5.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-MGO8R.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\registerhint.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-K1T9E.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\ja\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DO90K.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\preferences.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-V264P.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\fr\register.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-DGU2O.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_hot.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-J7AME.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_pushed.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-D7US3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon_80.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-3F25L.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_bg.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-70AA0.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-60QLL.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_btn_convert.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-O2N45.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_sep.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-6O00T.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\logo.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-LS267.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\icon.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-4QMQB.tmp to %ProgramFiles%\TunesKit Spotify Converter\ConvertLibrary.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-GECS4.tmp to %ProgramFiles%\TunesKit Spotify Converter\DuiLib.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-I76VR.tmp to %ProgramFiles%\TunesKit Spotify Converter\unins000.exe
- from %ProgramFiles%\TunesKit Spotify Converter\is-RECU7.tmp to %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-O4D22.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\dialog.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-6D21N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\frame.png
- from %ProgramFiles%\TunesKit Spotify Converter\is-7SQF9.tmp to %ProgramFiles%\TunesKit Spotify Converter\WinSparkle.dll
- from %ProgramFiles%\TunesKit Spotify Converter\is-TJ32C.tmp to %ProgramFiles%\TunesKit Spotify Converter\WebStream.dll
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-7N82U.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\about.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-0CLUK.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\history.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-1P9I0.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\menu.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-E99SE.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\scrollbar.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-U7D7N.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\main.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-3EVTI.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\menu.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-19LHA.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\library.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-83UO0.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\en\loading.xml
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-6LPLO.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_progress.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-PMHM6.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_icons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-680TL.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_default_cover.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-KS579.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-5VTJI.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_buttons.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-P3MQ3.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_check.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-MO2C5.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_line.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-03B67.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_dragfiles.png
- from %ProgramFiles%\TunesKit Spotify Converter\skin\is-UAT1B.tmp to %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_bk.png
Network activity:
Connects to:
- 'tu###kit.com':80
- 'localhost':1038
TCP:
HTTP GET requests:
- http://www.tu###kit.com/music-converter-for-spotify-win/user-guide.html via tu###kit.com
UDP:
- DNS ASK www.tu###kit.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
Creates and executes the following:
- '%WINDIR%\Temp\Temp_1\restfiles\reg.exe'
- '%TEMP%\is-QLFED.tmp\setup.tmp' /SL5="$100EE,1620071,134144,%WINDIR%\Temp\Temp_1\restfiles\setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%WINDIR%\Temp\Temp_1\restfiles\setup.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Executes the following:
- '%WINDIR%\regedit.exe' /S reg.reg
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\install.cmd" "
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
