Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\Software\Classes\Winamp.File\shell\open\command] '' = '"%ProgramFiles(x86)%\Winamp\Winamp.exe" "%1"'
- [<HKLM>\Software\Classes\Winamp.PlayList\shell\open\command] '' = '"%ProgramFiles(x86)%\Winamp\Winamp.exe" "%1"'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'WinampAgent' = '"%ProgramFiles(x86)%\Winamp\Winampa.exe"'
Modifies file system
Creates the following files
- %WINDIR%\temp\winamp280_full.exe
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\tag - trance travel.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\tag - lightspeed.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\tag - bitter paper.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - the box.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - science of superscope2.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - science of superscope.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - musthromland1.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -early doctor who.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -aztec temple.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - katmandude.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - katmanducommercial1.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - disco ma cubism.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - amanita muscaria open mind rmx.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - wind in mind.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - test4.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - spacefolding inside a black hole.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - lucid sky.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - fireworks kaliadascope mk 2.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -faeries -in my dreams rmx-.avs
- %HOMEPATH%\desktop\winamp.lnk
- %WINDIR%\winamp.ini
- %HOMEPATH%\favorites\links\free aol & unlimited internet.url
- %HOMEPATH%\favorites\free aol & unlimited internet.url
- %ALLUSERSPROFILE%\microsoft\windows\start menu\free aol & unlimited internet.url
- %HOMEPATH%\desktop\free aol & unlimited internet.url
- %ProgramFiles(x86)%\winamp\aod\aol.ini
- %ProgramFiles(x86)%\winamp\aod\aolondesktop.exe
- %ProgramFiles(x86)%\winamp\aod\man_sign1.ico
- %ProgramFiles(x86)%\winamp\aod\circle_f1.ico
- %ProgramFiles(x86)%\winamp\plugins\cddbcontrolwinamp.dll
- %ProgramFiles(x86)%\winamp\plugins\cddbuiwinamp.dll
- %ProgramFiles(x86)%\winamp\winamp.ini
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -the rings that talked.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -rush.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -rolling wave.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -proper filthy naughty.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - shirka's eye.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\marco - lone - arkanoid legent.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - old, old, old school.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - oh my god, it's full of stars (justinmod).avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - nuclear blobs.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_countingbeats.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_sunflowers.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_spirofun.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_sentinel.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_rotor.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_negative.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_livinginabox.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_freefall.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_beatspiral.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_wave.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_first3d_pulsar.avs
- %TEMP%\wmaudioredist.exe
- %ProgramFiles(x86)%\winamp\plugins\out_wm.dll
- %ProgramFiles(x86)%\winamp\winampmb.htm
- %ProgramFiles(x86)%\winamp\demo.mp3
- %ProgramFiles(x86)%\winamp\winamp.m3u
- %WINDIR%\temp\winamp 280.exe
- %ProgramFiles(x86)%\winamp\winamp.q1
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\zen-x -my mind flowers -275 mix-.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_zerog.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - new interferences rule.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\elvis_real3d_superspiro.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - living power ball.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\lone - fuzzy nullsoft.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justinsnewpoop.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - yay.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - yay mk ii.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - the landscape is killing me.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - superscope love.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - spiro.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - sexyfast.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - quite nice.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - pulsing shat.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - pretty dots.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - oot.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - new-dynamic2.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - new-dynamic.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - new taste.avs
- %ProgramFiles(x86)%\winamp\plugins\avs\newpicks\justin - flying around i am.avs
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012022100220221003\index.dat
Deletes the following files
- %TEMP%\wmaudioredist.exe
- %ProgramFiles(x86)%\winamp\aod\aol.ini
Modifies the following files
- %ProgramFiles(x86)%\winamp\whatsnew.txt
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\winamp\winamp.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\winamp\what's new.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\winamp\uninstall winamp.lnk
- %APPDATA%\microsoft\internet explorer\quick launch\winamp.lnk
Miscellaneous
Searches for the following windows
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'WinampAgentMain' WindowName: ''
- ClassName: 'Winamp v1.x' WindowName: ''
Creates and executes the following
- '%WINDIR%\temp\winamp 280.exe'
- '%WINDIR%\temp\winamp280_full.exe'
- '%TEMP%\wmaudioredist.exe' /Q /R:N
- '%ProgramFiles(x86)%\winamp\aod\aolondesktop.exe'
Executes the following
- '%ProgramFiles(x86)%\winamp\winamp.exe' /INSTALL
- '%ProgramFiles(x86)%\winamp\winampa.exe'
