Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'hvk' = '%TEMP%\RarSFX0\hvk.exe'
Modifies file system:
Creates the following files:
- %TEMP%\RarSFX0\Keyboards\AlphabeticalEn.txt
- %TEMP%\RarSFX0\Sound\Gurgle4.wav
- %TEMP%\RarSFX0\Sound\Gurgle3.wav
- %TEMP%\RarSFX0\Sound\Gurgle2.wav
- %TEMP%\RarSFX0\Sound\Gurgle1.wav
- %TEMP%\RarSFX0\Sound\Ding2.wav
- %TEMP%\RarSFX0\Sound\Ding1.wav
- %TEMP%\RarSFX0\Sound\Quiet1.wav
- %TEMP%\RarSFX0\Sound\Hammer.wav
- %TEMP%\RarSFX0\Sound\Clear1.wav
- %TEMP%\RarSFX0\Sound\Cashreg.wav
- %TEMP%\RarSFX0\Sound\Camera.wav
- %TEMP%\RarSFX0\Sound\Beep5.wav
- %TEMP%\RarSFX0\Sound\Beep4.wav
- %TEMP%\RarSFX0\Sound\Beep3.wav
- %TEMP%\RarSFX0\Sound\Click.wav
- %TEMP%\RarSFX0\Sound\Type3.wav
- %TEMP%\RarSFX0\Sound\Quiet2.wav
- %TEMP%\RarSFX0\Sound\Type1.wav
- %TEMP%\RarSFX0\Sound\Switch9.wav
- %TEMP%\RarSFX0\Sound\Switch8.wav
- %TEMP%\RarSFX0\Sound\Switch7.wav
- %TEMP%\RarSFX0\Sound\Switch6.wav
- %TEMP%\RarSFX0\Sound\Switch5.wav
- %TEMP%\RarSFX0\Sound\Switch4.wav
- %TEMP%\RarSFX0\Sound\Switch3.wav
- %TEMP%\RarSFX0\Sound\Switch2.wav
- %TEMP%\RarSFX0\Sound\Switch1.wav
- %TEMP%\RarSFX0\Sound\Quiet8.wav
- %TEMP%\RarSFX0\Sound\Quiet7.wav
- %TEMP%\RarSFX0\Sound\Quiet6.wav
- %TEMP%\RarSFX0\Sound\Quiet5.wav
- %TEMP%\RarSFX0\Sound\Quiet4.wav
- %TEMP%\RarSFX0\Sound\Beep2.wav
- %TEMP%\RarSFX0\Sound\Clear2.wav
- %TEMP%\RarSFX0\Sound\Quiet3.wav
- %TEMP%\RarSFX0\Sound\Type2.wav
- %TEMP%\RarSFX0\Keyboards\w72.bmp
- %TEMP%\RarSFX0\Keyboards\skey2g.bmp
- %TEMP%\RarSFX0\Keyboards\skey3b.bmp
- %TEMP%\RarSFX0\Keyboards\skey3a.bmp
- %TEMP%\RarSFX0\Keyboards\skey3.bmp
- %TEMP%\RarSFX0\Keyboards\skey2z.bmp
- %TEMP%\RarSFX0\Keyboards\skey2w.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey11.bmp
- %TEMP%\RarSFX0\Keyboards\skey3w.bmp
- %TEMP%\RarSFX0\Keyboards\skey3z.bmp
- %TEMP%\RarSFX0\Keyboards\skey2.bmp
- %TEMP%\RarSFX0\Keyboards\skey1z.bmp
- %TEMP%\RarSFX0\Keyboards\skey1w.bmp
- %TEMP%\RarSFX0\Keyboards\skey1g.bmp
- %TEMP%\RarSFX0\Keyboards\skey1b.bmp
- %TEMP%\RarSFX0\Keyboards\skey2a.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey12.bmp
- %TEMP%\RarSFX0\Keyboards\w71.bmp
- %TEMP%\RarSFX0\Keyboards\w73.bmp
- %TEMP%\RarSFX0\Keyboards\skey3g.bmp
- %TEMP%\RarSFX0\Skins\VistaSelected.bmp
- %TEMP%\RarSFX0\Skins\VistaNormal.bmp
- %TEMP%\RarSFX0\Skins\VistaHot.bmp
- %TEMP%\RarSFX0\Keyboards\tsw3.bmp
- %TEMP%\RarSFX0\Keyboards\tsw2.bmp
- %TEMP%\RarSFX0\Keyboards\tsw1.bmp
- %TEMP%\RarSFX0\Keyboards\tsg1.bmp
- %TEMP%\RarSFX0\Keyboards\tsbk.bmp
- %TEMP%\RarSFX0\Keyboards\tab.bmp
- %TEMP%\RarSFX0\Keyboards\skinkeybkg.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey23.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey22.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey21.bmp
- %TEMP%\RarSFX0\Keyboards\skinkey13.bmp
- %TEMP%\RarSFX0\Sound\Beep1.wav
- %TEMP%\RarSFX0\Keyboards\UMPC.txt
- %TEMP%\RarSFX0\Sound\Type4.wav
- %TEMP%\RarSFX0\Keyboards\Ergonomic.gif
- %TEMP%\RarSFX0\Keyboards\Diamonds.gif
- %TEMP%\RarSFX0\Background\Aluminum.gif
- %TEMP%\RarSFX0\hvk.url
- %TEMP%\RarSFX0\AccessDenied.reg
- %TEMP%\RarSFX0\AccessAllowed.reg
- %TEMP%\RarSFX0\Keyboards\google.gif
- %TEMP%\RarSFX0\Keyboards\OneSide2.gif
- %TEMP%\RarSFX0\options.ico
- %TEMP%\RarSFX0\unins000.dat
- %TEMP%\RarSFX0\Icons\WinXP.cki
- %TEMP%\RarSFX0\Icons\WinVista.cki
- %TEMP%\RarSFX0\Icons\Win8.cki
- %TEMP%\RarSFX0\Icons\Win7.cki
- %TEMP%\RarSFX0\explorer.ico
- %TEMP%\RarSFX0\Data\en.dic
- %TEMP%\RarSFX0\Sound\Type5.wav
- %TEMP%\RarSFX0\Keyboards\yahoo.gif
- %TEMP%\RarSFX0\Background\Stars.JPG
- %TEMP%\RarSFX0\Background\Splashes.JPG
- %TEMP%\RarSFX0\Background\Shear.JPG
- %TEMP%\RarSFX0\Background\GreenDrops.JPG
- %TEMP%\RarSFX0\Background\Green.JPG
- %TEMP%\RarSFX0\Background\Chocolate.JPG
- %TEMP%\RarSFX0\Background\Candy.JPG
- %TEMP%\RarSFX0\Keyboards\yahoo.png
- %TEMP%\RarSFX0\Keyboards\google.png
- %TEMP%\RarSFX0\Keyboards\FlatSelected.png
- %TEMP%\RarSFX0\Keyboards\FlatNormal.png
- %TEMP%\RarSFX0\Keyboards\FlatHot.png
- %TEMP%\RarSFX0\Keyboards\FlatBackground.png
- %TEMP%\RarSFX0\Keyboards\Black.png
- %TEMP%\RarSFX0\Icons\Win2000.cki
- %TEMP%\RarSFX0\Icons\TheBat.cki
- %TEMP%\RarSFX0\Keyboards\OneSide.gif
- %TEMP%\RarSFX0\Icons\Opera.cki
- %TEMP%\RarSFX0\Icons\OpenOffice.cki
- %TEMP%\RarSFX0\Icons\MDreamweaver.cki
- %TEMP%\RarSFX0\Icons\AdobeInDesign.cki
- %TEMP%\RarSFX0\Icons\DesktopVista.cki
- %TEMP%\RarSFX0\Icons\Desktop2000.cki
- %TEMP%\RarSFX0\Icons\CorelPhotoPaint.cki
- %TEMP%\RarSFX0\Icons\CorelDRAW.cki
- %TEMP%\RarSFX0\Icons\BDS.cki
- %TEMP%\RarSFX0\Icons\AdobePhotoshop.cki
- %TEMP%\RarSFX0\Icons\AdobeImageReady.cki
- %TEMP%\RarSFX0\Keyboards\skey1a.bmp
- %TEMP%\RarSFX0\Icons\AdobeIllustrator.cki
- %TEMP%\RarSFX0\Data\HVKActions.cka
- %TEMP%\RarSFX0\Sound\Type8.wav
- %TEMP%\RarSFX0\Sound\Type7.wav
- %TEMP%\RarSFX0\Sound\Type6.wav
- %TEMP%\RarSFX0\Icons\MozillaFirefox.cki
- %TEMP%\RarSFX0\Icons\MozillaFirefox4.cki
- %TEMP%\RarSFX0\Keyboards\skey2b.bmp
- %TEMP%\RarSFX0\Icons\MsDExplorer.cki
- %TEMP%\RarSFX0\Icons\MozillaThunderbird.cki
- %TEMP%\RarSFX0\Icons\DesktopXP.cki
- %TEMP%\RarSFX0\Icons\MsWord.cki
- %TEMP%\RarSFX0\Icons\MsVisualStudioCommon.cki
- %TEMP%\RarSFX0\Icons\MsVisualStudio2.cki
- %TEMP%\RarSFX0\Icons\MsVisualStudio1.cki
- %TEMP%\RarSFX0\Icons\MsVisio.cki
- %TEMP%\RarSFX0\Icons\MsPaint.cki
- %TEMP%\RarSFX0\Icons\MsOutlookExpress.cki
- %TEMP%\RarSFX0\Icons\MsOutlook.cki
- %TEMP%\RarSFX0\Icons\MsNotepad.cki
- %TEMP%\RarSFX0\Icons\MsMovieMaker.cki
- %TEMP%\RarSFX0\Icons\MsMediaPlayer.cki
- %TEMP%\RarSFX0\Icons\MsMail.cki
- %TEMP%\RarSFX0\Icons\MsIExplorer.cki
- %TEMP%\RarSFX0\Icons\MsExcel.cki
- %TEMP%\RarSFX0\Icons\MsWordPad.cki
- %TEMP%\RarSFX0\Keyboards\skey1.bmp
- %TEMP%\RarSFX0\Keyboards\shift.bmp
- %TEMP%\RarSFX0\Keyboards\roundbkg3.bmp
- %TEMP%\RarSFX0\Keyboards\NumPad.txt
- %TEMP%\RarSFX0\Lang\pt.txt
- %TEMP%\RarSFX0\Lang\pl.txt
- %TEMP%\RarSFX0\Keyboards\OneSide2.txt
- %TEMP%\RarSFX0\Keyboards\OneSide.txt
- %TEMP%\RarSFX0\Keyboards\Oklick.txt
- %TEMP%\RarSFX0\Keyboards\SkinFlat.txt
- %TEMP%\RarSFX0\Lang\se.txt
- %TEMP%\RarSFX0\Lang\sk.txt
- %TEMP%\RarSFX0\Keyboards\Multimedia2.txt
- %TEMP%\RarSFX0\Keyboards\Multimedia.txt
- %TEMP%\RarSFX0\Keyboards\MiniTight.txt
- %TEMP%\RarSFX0\Keyboards\MiniSlim+Player.txt
- %TEMP%\RarSFX0\Keyboards\MiniFull.txt
- %TEMP%\RarSFX0\Keyboards\MultimediaSmall.txt
- %TEMP%\RarSFX0\Keyboards\SkinMulticolor.txt
- %TEMP%\RarSFX0\Keyboards\StandardSmall.txt
- %TEMP%\RarSFX0\Keyboards\MiniDemo.txt
- %TEMP%\RarSFX0\Keyboards\MiniAlpha.txt
- %TEMP%\RarSFX0\Keyboards\StandardBigAlpha.txt
- %TEMP%\RarSFX0\Keyboards\StandardBig.txt
- %TEMP%\RarSFX0\Keyboards\StandardAltBlock.txt
- %TEMP%\RarSFX0\Keyboards\StandardAlt2.txt
- %TEMP%\RarSFX0\Keyboards\StandardAlt1.txt
- %TEMP%\RarSFX0\Keyboards\Standard2.txt
- %TEMP%\RarSFX0\Keyboards\Standard.txt
- %TEMP%\RarSFX0\Lang\sr.txt
- %TEMP%\RarSFX0\Keyboards\SkinWin7.txt
- %TEMP%\RarSFX0\Keyboards\SkinWhite.txt
- %TEMP%\RarSFX0\Keyboards\SkinRound4.txt
- %TEMP%\RarSFX0\Keyboards\SkinRound3.txt
- %TEMP%\RarSFX0\Keyboards\SkinRound2.txt
- %TEMP%\RarSFX0\Keyboards\SkinRound1.txt
- %TEMP%\RarSFX0\Keyboards\MultimediaSmall2.txt
- %TEMP%\RarSFX0\Keyboards\MiniAlphaSmall.txt
- %TEMP%\RarSFX0\Keyboards\Mini2.txt
- %TEMP%\RarSFX0\Keyboards\Ergonomic.txt
- %TEMP%\RarSFX0\Keyboards\Circles.txt
- %TEMP%\RarSFX0\Keyboards\Diamonds.txt
- %TEMP%\RarSFX0\Keyboards\DellInspiron6000.txt
- %TEMP%\RarSFX0\Lang\de.txt
- %TEMP%\RarSFX0\Lang\cs.txt
- %TEMP%\RarSFX0\Lang\cn.txt
- %TEMP%\RarSFX0\Keyboards\CirclesBig.txt
- %TEMP%\RarSFX0\Keyboards\Calculator.txt
- %TEMP%\RarSFX0\Lang\du.txt
- %TEMP%\RarSFX0\Lang\bg.txt
- %TEMP%\RarSFX0\Lang\be.txt
- %TEMP%\RarSFX0\Lang\ar.txt
- %TEMP%\RarSFX0\Data\AlternateSymbols.txt
- %TEMP%\RarSFX0\Keyboards\AlphabeticalVerticalEn.txt
- %TEMP%\RarSFX0\Keyboards\AlphabeticalGroupedEn.txt
- %TEMP%\RarSFX0\Keyboards\TabletPC.txt
- %TEMP%\RarSFX0\hvkRu.chm
- %TEMP%\RarSFX0\Lang\en.txt
- %TEMP%\RarSFX0\Lang\fr.txt
- %TEMP%\RarSFX0\Lang\dk.txt
- %TEMP%\RarSFX0\Keyboards\Mini.txt
- %TEMP%\RarSFX0\Lang\lv.txt
- %TEMP%\RarSFX0\Lang\ko.txt
- %TEMP%\RarSFX0\Keyboards\KioskWeb.txt
- %TEMP%\RarSFX0\Keyboards\KioskSpecial.txt
- %TEMP%\RarSFX0\Keyboards\KioskSkin.txt
- %TEMP%\RarSFX0\Keyboards\KioskPad.txt
- %TEMP%\RarSFX0\Keyboards\KioskAlpha.txt
- %TEMP%\RarSFX0\Lang\it.txt
- %TEMP%\RarSFX0\Lang\hu.txt
- %TEMP%\RarSFX0\Lang\hr.txt
- %TEMP%\RarSFX0\Lang\gr.txt
- %TEMP%\RarSFX0\Keyboards\FullScreen1440.txt
- %TEMP%\RarSFX0\Keyboards\FullScreen1024.txt
- %TEMP%\RarSFX0\Lang\es.txt
- %TEMP%\RarSFX0\hvk.chm
- %TEMP%\RarSFX0\Keyboards\TabletPC2.txt
- %TEMP%\RarSFX0\Keyboards\TouchGame1.txt
- %TEMP%\RarSFX0\Skins\OfficeNormalBlue.bmp
- %TEMP%\RarSFX0\Skins\OfficeHot.bmp
- %TEMP%\RarSFX0\Skins\MacOSSelected.bmp
- %TEMP%\RarSFX0\Skins\MacOSNormal.bmp
- %TEMP%\RarSFX0\Skins\MacOSHot.bmp
- %TEMP%\RarSFX0\Background\Lines.bmp
- %TEMP%\RarSFX0\Lang\ru.txt
- %TEMP%\RarSFX0\Keyboards\Lime.bmp
- %TEMP%\RarSFX0\Keyboards\kb4.bmp
- %TEMP%\RarSFX0\Keyboards\Ins.bmp
- %TEMP%\RarSFX0\Keyboards\Home.bmp
- %TEMP%\RarSFX0\Keyboards\hi.bmp
- %TEMP%\RarSFX0\Keyboards\enter.bmp
- %TEMP%\RarSFX0\Keyboards\End.bmp
- %TEMP%\RarSFX0\Skins\OfficeNormalBlack.bmp
- %TEMP%\RarSFX0\Skins\OfficeNormalSilver.bmp
- %TEMP%\RarSFX0\Keyboards\roundbkg2.bmp
- %TEMP%\RarSFX0\Keyboards\calc.bmp
- %TEMP%\RarSFX0\Skins\OfficeSelected.bmp
- %TEMP%\RarSFX0\Keyboards\roundbkg1.bmp
- %TEMP%\RarSFX0\Keyboards\round33.bmp
- %TEMP%\RarSFX0\Keyboards\round32.bmp
- %TEMP%\RarSFX0\Keyboards\round31.bmp
- %TEMP%\RarSFX0\Keyboards\round23.bmp
- %TEMP%\RarSFX0\Keyboards\round22.bmp
- %TEMP%\RarSFX0\Keyboards\round21.bmp
- %TEMP%\RarSFX0\Keyboards\round13.bmp
- %TEMP%\RarSFX0\Keyboards\round12.bmp
- %TEMP%\RarSFX0\Keyboards\round11.bmp
- %TEMP%\RarSFX0\Keyboards\PrtScr.bmp
- %TEMP%\RarSFX0\Keyboards\PgUp.bmp
- %TEMP%\RarSFX0\Keyboards\PgDown.bmp
- %TEMP%\RarSFX0\Keyboards\Pause.bmp
- %TEMP%\RarSFX0\Keyboards\Del.bmp
- %TEMP%\RarSFX0\Keyboards\kb3.bmp
- %TEMP%\RarSFX0\Background\BlueLines2.bmp
- %TEMP%\RarSFX0\Background\BlueLines.bmp
- %TEMP%\RarSFX0\Keyboards\Tight1.txt
- %TEMP%\RarSFX0\Keyboards\Transparent.txt
- %TEMP%\RarSFX0\Keyboards\UltraPhone1024.txt
- %TEMP%\RarSFX0\Lang\ua.txt
- %TEMP%\RarSFX0\Keyboards\TwoSides2.txt
- %TEMP%\RarSFX0\Keyboards\TwoSides.txt
- %TEMP%\RarSFX0\Lang\tw.txt
- %TEMP%\RarSFX0\Keyboards\Triangles.txt
- %TEMP%\RarSFX0\Lang\tr.txt
- %TEMP%\RarSFX0\Keyboards\UltraPhone640.txt
- %TEMP%\RarSFX0\Keyboards\TouchScreenWin8.txt
- %TEMP%\RarSFX0\Keyboards\TouchScreenLetters.txt
- %TEMP%\RarSFX0\Keyboards\TouchScreenFull.txt
- %TEMP%\RarSFX0\Keyboards\TouchGame3.txt
- %TEMP%\RarSFX0\Keyboards\TouchGame2.txt
- %TEMP%\RarSFX0\Keyboards\UltraPhone800.txt
- %TEMP%\RarSFX0\Keyboards\Tight2.txt
- %TEMP%\RarSFX0\Keyboards\UMPC_Num.txt
- %TEMP%\RarSFX0\Keyboards\UMPCx800.txt
- %TEMP%\RarSFX0\Skins\AquaSelected.bmp
- %TEMP%\RarSFX0\Keyboards\UltraPhone1440.txt
- %TEMP%\RarSFX0\Skins\AquaNormal.bmp
- %TEMP%\RarSFX0\Skins\AquaHot.bmp
- %TEMP%\RarSFX0\shellex.dll
- %TEMP%\RarSFX0\hvkH.dll
- %TEMP%\RarSFX0\hvkDeskBand64.dll
- %TEMP%\RarSFX0\hvkDeskBand.dll
- %TEMP%\RarSFX0\unins000.exe
- %TEMP%\RarSFX0\hvk.exe
- %TEMP%\RarSFX0\COptions.exe
- %TEMP%\RarSFX0\License.rtf
- %TEMP%\RarSFX0\changes.rtf
- %TEMP%\RarSFX0\Scripts\Common.js
- %TEMP%\RarSFX0\Keyboards\WorldTech.txt
- %TEMP%\RarSFX0\Keyboards\UMPC_Numx800.txt
- %APPDATA%\ComfortSoftware\hvk\Icons.tmp
Miscellaneous:
Searches for the following windows:
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'TFirstForm' WindowName: 'hvkFirstForm'
Creates and executes the following:
- '%TEMP%\RarSFX0\hvk.exe'
- '%TEMP%\RarSFX0\COptions.exe' "%TEMP%\RarSFX0\hvk.exe" 1 0 0