


The Trojan creates and/or writes to the following file(s):Ĭ:\Data\UltraISO Premium\local\temp\ce8_0x00400000.tls (5 bytes) The process UltraISO.exe:3304 makes changes in the file system. The following mutexes were created/opened:
#ULTRAISO PREMIUM 9.65 KEY CODE#
The Trojan injects its code into the following process(es): The Trojan creates the following process(es):
#ULTRAISO PREMIUM 9.65 KEY WINDOWS#
The autorun script will execute the Trojan's file once a user opens a drive's folder in Windows Explorer. It writes its executable and creates "autorun.inf" scripts on all removable drives.
