Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [<HKLM>\SOFTWARE\Classes\cclaunch\shell\open\command] '' = '"%ProgramFiles%\CCleaner\CCleaner.exe" /%1'
Modifies file system
Creates the following files
- %TEMP%\aut463.tmp
- %ProgramFiles%\ccleaner\lang\is-f0dgq.tmp
- %ProgramFiles%\ccleaner\lang\is-5rug1.tmp
- %ProgramFiles%\ccleaner\lang\is-gkmmn.tmp
- %ProgramFiles%\ccleaner\lang\is-rd9ka.tmp
- %ProgramFiles%\ccleaner\lang\is-f5apf.tmp
- %ProgramFiles%\ccleaner\lang\is-c9qqb.tmp
- %ProgramFiles%\ccleaner\lang\is-o5ds8.tmp
- %ProgramFiles%\ccleaner\lang\is-48qev.tmp
- %ProgramFiles%\ccleaner\lang\is-92apd.tmp
- %ProgramFiles%\ccleaner\lang\is-8hb65.tmp
- %ProgramFiles%\ccleaner\lang\is-4ich5.tmp
- %ProgramFiles%\ccleaner\lang\is-56ph6.tmp
- %ProgramFiles%\ccleaner\lang\is-k6nur.tmp
- %ProgramFiles%\ccleaner\lang\is-9ussk.tmp
- %ProgramFiles%\ccleaner\lang\is-vogcv.tmp
- %ProgramFiles%\ccleaner\lang\is-7n15e.tmp
- %ProgramFiles%\ccleaner\lang\is-628vv.tmp
- %ProgramFiles%\ccleaner\lang\is-aqtio.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ccleaner\uninstall ccleaner.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ccleaner\ccleaner.lnk
- %ProgramFiles%\ccleaner\is-g70o7.tmp
- %ProgramFiles%\ccleaner\is-tpovi.tmp
- %ProgramFiles%\ccleaner\is-n6d0f.tmp
- %ProgramFiles%\ccleaner\is-5g9ft.tmp
- %ProgramFiles%\ccleaner\lang\is-u74ht.tmp
- %ProgramFiles%\ccleaner\lang\is-noc43.tmp
- %ProgramFiles%\ccleaner\lang\is-nfcba.tmp
- %ProgramFiles%\ccleaner\lang\is-uji09.tmp
- %ProgramFiles%\ccleaner\lang\is-2hcun.tmp
- %ProgramFiles%\ccleaner\lang\is-1t2mr.tmp
- %ProgramFiles%\ccleaner\lang\is-b54sn.tmp
- %ProgramFiles%\ccleaner\lang\is-qjil5.tmp
- %ProgramFiles%\ccleaner\lang\is-0ev98.tmp
- %ProgramFiles%\ccleaner\lang\is-6sos2.tmp
- %ProgramFiles%\ccleaner\lang\is-7d2r2.tmp
- %ProgramFiles%\ccleaner\lang\is-tudo4.tmp
- %ProgramFiles%\ccleaner\lang\is-g8hs0.tmp
- %ProgramFiles%\ccleaner\lang\is-poskd.tmp
- %ProgramFiles%\ccleaner\lang\is-5nfmo.tmp
- %ProgramFiles%\ccleaner\lang\is-lo3cf.tmp
- %ProgramFiles%\ccleaner\lang\is-7951r.tmp
- %ProgramFiles%\ccleaner\lang\is-5ds2b.tmp
- %ProgramFiles%\ccleaner\lang\is-u3u6v.tmp
- %ProgramFiles%\ccleaner\lang\is-rjgqs.tmp
- %ProgramFiles%\ccleaner\lang\is-o60oh.tmp
- %ProgramFiles%\ccleaner\is-dfcja.tmp
- %TEMP%\is-7tpau.tmp\_isetup\_setup64.tmp
- %TEMP%\is-phtr4.tmp\~sksjaca.tmp
- %CommonProgramFiles(x86)%\~sksjaca.tmp
- %ProgramFiles%\ccleaner\lang\is-9l1fr.tmp
- %ProgramFiles%\ccleaner\lang\is-lko9b.tmp
- %ProgramFiles%\ccleaner\lang\is-ntb26.tmp
- %ProgramFiles%\ccleaner\lang\is-nahbn.tmp
- %ProgramFiles%\ccleaner\lang\is-bastc.tmp
- %ProgramFiles%\ccleaner\lang\is-89ltm.tmp
- %ProgramFiles%\ccleaner\lang\is-em279.tmp
- %ProgramFiles%\ccleaner\lang\is-rjvin.tmp
- %ProgramFiles%\ccleaner\lang\is-3lapf.tmp
- %ProgramFiles%\ccleaner\lang\is-9amnr.tmp
- %ProgramFiles%\ccleaner\lang\is-g98qp.tmp
- %ProgramFiles%\ccleaner\lang\is-9lf8q.tmp
- %ProgramFiles%\ccleaner\lang\is-ae62t.tmp
- %ProgramFiles%\ccleaner\lang\is-hvijp.tmp
- %ProgramFiles%\ccleaner\lang\is-rgjkp.tmp
- %ProgramFiles%\ccleaner\lang\is-bmhmk.tmp
- %ProgramFiles%\ccleaner\lang\is-afjt1.tmp
- %ProgramFiles%\ccleaner\lang\is-l2a9p.tmp
- %ProgramFiles%\ccleaner\lang\is-7pdni.tmp
- %ProgramFiles%\ccleaner\lang\is-mlk9c.tmp
- C:\users\public\desktop\ccleaner.lnk
- %ProgramFiles%\ccleaner\unins000.dat
Sets the 'hidden' attribute to the following files
- %CommonProgramFiles(x86)%\~sksjaca.tmp
Deletes the following files
- %TEMP%\aut463.tmp
- %TEMP%\is-7tpau.tmp\_isetup\_setup64.tmp
- %TEMP%\is-phtr4.tmp\~sksjaca.tmp
- %CommonProgramFiles(x86)%\~sksjaca.tmp
Moves the following files
- from %ProgramFiles%\ccleaner\is-dfcja.tmp to %ProgramFiles%\ccleaner\unins000.exe
- from %ProgramFiles%\ccleaner\lang\is-o5ds8.tmp to %ProgramFiles%\ccleaner\lang\lang-1071.dll
- from %ProgramFiles%\ccleaner\lang\is-7n15e.tmp to %ProgramFiles%\ccleaner\lang\lang-1079.dll
- from %ProgramFiles%\ccleaner\lang\is-9ussk.tmp to %ProgramFiles%\ccleaner\lang\lang-1081.dll
- from %ProgramFiles%\ccleaner\lang\is-k6nur.tmp to %ProgramFiles%\ccleaner\lang\lang-1086.dll
- from %ProgramFiles%\ccleaner\lang\is-56ph6.tmp to %ProgramFiles%\ccleaner\lang\lang-1087.dll
- from %ProgramFiles%\ccleaner\lang\is-4ich5.tmp to %ProgramFiles%\ccleaner\lang\lang-1090.dll
- from %ProgramFiles%\ccleaner\lang\is-8hb65.tmp to %ProgramFiles%\ccleaner\lang\lang-1092.dll
- from %ProgramFiles%\ccleaner\lang\is-92apd.tmp to %ProgramFiles%\ccleaner\lang\lang-1093.dll
- from %ProgramFiles%\ccleaner\lang\is-vogcv.tmp to %ProgramFiles%\ccleaner\lang\lang-1102.dll
- from %ProgramFiles%\ccleaner\lang\is-48qev.tmp to %ProgramFiles%\ccleaner\lang\lang-1104.dll
- from %ProgramFiles%\ccleaner\lang\is-c9qqb.tmp to %ProgramFiles%\ccleaner\lang\lang-1109.dll
- from %ProgramFiles%\ccleaner\lang\is-f5apf.tmp to %ProgramFiles%\ccleaner\lang\lang-1110.dll
- from %ProgramFiles%\ccleaner\lang\is-rd9ka.tmp to %ProgramFiles%\ccleaner\lang\lang-1155.dll
- from %ProgramFiles%\ccleaner\lang\is-5rug1.tmp to %ProgramFiles%\ccleaner\lang\lang-2070.dll
- from %ProgramFiles%\ccleaner\is-n6d0f.tmp to %ProgramFiles%\ccleaner\ccleaner.dat
- from %ProgramFiles%\ccleaner\lang\is-f0dgq.tmp to %ProgramFiles%\ccleaner\lang\lang-2074.dll
- from %ProgramFiles%\ccleaner\lang\is-628vv.tmp to %ProgramFiles%\ccleaner\lang\lang-3098.dll
- from %ProgramFiles%\ccleaner\lang\is-noc43.tmp to %ProgramFiles%\ccleaner\lang\lang-5146.dll
- from %ProgramFiles%\ccleaner\lang\is-u74ht.tmp to %ProgramFiles%\ccleaner\lang\lang-9999.dll
- from %ProgramFiles%\ccleaner\lang\is-qjil5.tmp to %ProgramFiles%\ccleaner\lang\lang-1025.dll
- from %ProgramFiles%\ccleaner\lang\is-b54sn.tmp to %ProgramFiles%\ccleaner\lang\lang-1026.dll
- from %ProgramFiles%\ccleaner\lang\is-1t2mr.tmp to %ProgramFiles%\ccleaner\lang\lang-1027.dll
- from %ProgramFiles%\ccleaner\lang\is-2hcun.tmp to %ProgramFiles%\ccleaner\lang\lang-1028.dll
- from %ProgramFiles%\ccleaner\lang\is-uji09.tmp to %ProgramFiles%\ccleaner\lang\lang-1029.dll
- from %ProgramFiles%\ccleaner\lang\is-nfcba.tmp to %ProgramFiles%\ccleaner\lang\lang-1030.dll
- from %ProgramFiles%\ccleaner\lang\is-aqtio.tmp to %ProgramFiles%\ccleaner\lang\lang-1031.dll
- from %ProgramFiles%\ccleaner\lang\is-0ev98.tmp to %ProgramFiles%\ccleaner\lang\lang-1032.dll
- from %ProgramFiles%\ccleaner\is-5g9ft.tmp to %ProgramFiles%\ccleaner\branding.dll
- from %ProgramFiles%\ccleaner\lang\is-6sos2.tmp to %ProgramFiles%\ccleaner\lang\lang-1068.dll
- from %ProgramFiles%\ccleaner\lang\is-gkmmn.tmp to %ProgramFiles%\ccleaner\lang\lang-2052.dll
- from %ProgramFiles%\ccleaner\lang\is-7d2r2.tmp to %ProgramFiles%\ccleaner\lang\lang-1067.dll
- from %ProgramFiles%\ccleaner\lang\is-hvijp.tmp to %ProgramFiles%\ccleaner\lang\lang-1049.dll
- from %ProgramFiles%\ccleaner\lang\is-o60oh.tmp to %ProgramFiles%\ccleaner\lang\lang-1034.dll
- from %ProgramFiles%\ccleaner\lang\is-rjgqs.tmp to %ProgramFiles%\ccleaner\lang\lang-1035.dll
- from %ProgramFiles%\ccleaner\lang\is-9l1fr.tmp to %ProgramFiles%\ccleaner\lang\lang-1036.dll
- from %ProgramFiles%\ccleaner\lang\is-u3u6v.tmp to %ProgramFiles%\ccleaner\lang\lang-1037.dll
- from %ProgramFiles%\ccleaner\lang\is-7951r.tmp to %ProgramFiles%\ccleaner\lang\lang-1038.dll
- from %ProgramFiles%\ccleaner\lang\is-lo3cf.tmp to %ProgramFiles%\ccleaner\lang\lang-1040.dll
- from %ProgramFiles%\ccleaner\lang\is-5nfmo.tmp to %ProgramFiles%\ccleaner\lang\lang-1041.dll
- from %ProgramFiles%\ccleaner\lang\is-poskd.tmp to %ProgramFiles%\ccleaner\lang\lang-1042.dll
- from %ProgramFiles%\ccleaner\lang\is-g8hs0.tmp to %ProgramFiles%\ccleaner\lang\lang-1043.dll
- from %ProgramFiles%\ccleaner\lang\is-ntb26.tmp to %ProgramFiles%\ccleaner\lang\lang-1044.dll
- from %ProgramFiles%\ccleaner\lang\is-5ds2b.tmp to %ProgramFiles%\ccleaner\lang\lang-1045.dll
- from %ProgramFiles%\ccleaner\lang\is-lko9b.tmp to %ProgramFiles%\ccleaner\lang\lang-1046.dll
- from %ProgramFiles%\ccleaner\lang\is-nahbn.tmp to %ProgramFiles%\ccleaner\lang\lang-1048.dll
- from %ProgramFiles%\ccleaner\lang\is-mlk9c.tmp to %ProgramFiles%\ccleaner\lang\lang-1050.dll
- from %ProgramFiles%\ccleaner\lang\is-bastc.tmp to %ProgramFiles%\ccleaner\lang\lang-1065.dll
- from %ProgramFiles%\ccleaner\lang\is-7pdni.tmp to %ProgramFiles%\ccleaner\lang\lang-1051.dll
- from %ProgramFiles%\ccleaner\lang\is-l2a9p.tmp to %ProgramFiles%\ccleaner\lang\lang-1052.dll
- from %ProgramFiles%\ccleaner\lang\is-afjt1.tmp to %ProgramFiles%\ccleaner\lang\lang-1053.dll
- from %ProgramFiles%\ccleaner\lang\is-bmhmk.tmp to %ProgramFiles%\ccleaner\lang\lang-1054.dll
- from %ProgramFiles%\ccleaner\lang\is-rgjkp.tmp to %ProgramFiles%\ccleaner\lang\lang-1055.dll
- from %ProgramFiles%\ccleaner\lang\is-ae62t.tmp to %ProgramFiles%\ccleaner\lang\lang-1056.dll
- from %ProgramFiles%\ccleaner\lang\is-89ltm.tmp to %ProgramFiles%\ccleaner\lang\lang-1057.dll
- from %ProgramFiles%\ccleaner\lang\is-9lf8q.tmp to %ProgramFiles%\ccleaner\lang\lang-1058.dll
- from %ProgramFiles%\ccleaner\lang\is-g98qp.tmp to %ProgramFiles%\ccleaner\lang\lang-1059.dll
- from %ProgramFiles%\ccleaner\lang\is-9amnr.tmp to %ProgramFiles%\ccleaner\lang\lang-1060.dll
- from %ProgramFiles%\ccleaner\lang\is-3lapf.tmp to %ProgramFiles%\ccleaner\lang\lang-1061.dll
- from %ProgramFiles%\ccleaner\lang\is-rjvin.tmp to %ProgramFiles%\ccleaner\lang\lang-1062.dll
- from %ProgramFiles%\ccleaner\lang\is-em279.tmp to %ProgramFiles%\ccleaner\lang\lang-1063.dll
- from %ProgramFiles%\ccleaner\lang\is-tudo4.tmp to %ProgramFiles%\ccleaner\lang\lang-1066.dll
- from %ProgramFiles%\ccleaner\is-g70o7.tmp to %ProgramFiles%\ccleaner\ccleanerdu.dll
Substitutes the following executable files
- %ProgramFiles%\CCleaner\CCleaner.exe
Modifies the HOSTS file.
Miscellaneous
Creates and executes the following
- '%CommonProgramFiles(x86)%\~sksjaca.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%TEMP%\is-phtr4.tmp\~sksjaca.tmp' /SL5="$120224,26265525,847360,%CommonProgramFiles(x86)%\~sksjaca.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-