%System%\Codecs\Lang\mpcresources.sl.dll.%System%\Codecs\Lang\mpcresources.sk.dll.%System%\Codecs\Lang\mpcresources.ro.dll.%System%\Codecs\Lang\mpcresources.pt_PT.dll.%System%\Codecs\Lang\mpcresources.pt_BR.dll.%System%\Codecs\Lang\mpcresources.pa.dll.%System%\Codecs\Lang\mpcresources.ms_MY.dll.%System%\Codecs\Lang\mpcresources.lt.dll.%System%\Codecs\Lang\mpcresources.ko.dll.%System%\Codecs\Lang\mpcresources.ja.dll.%System%\Codecs\Lang\mpcresources.id.dll.%System%\Codecs\Lang\mpcresources.hy.dll.%System%\Codecs\Lang\mpcresources.hu.dll.%System%\Codecs\Lang\mpcresources.hr.dll.%System%\Codecs\Lang\mpcresources.he.dll.%System%\Codecs\Lang\mpcresources.gl.dll.%System%\Codecs\Lang\mpcresources.fi.dll.%System%\Codecs\Lang\mpcresources.es.dll.%System%\Codecs\Lang\mpcresources.en_GB.dll.%System%\Codecs\Lang\mpcresources.el.dll.%System%\Codecs\Lang\mpcresources.da.dll.%System%\Codecs\Lang\mpcresources.cs.dll.%System%\Codecs\Lang\mpcresources.ca.dll.%System%\Codecs\Lang\mpcresources.bs_BA.dll.%System%\Codecs\Lang\mpcresources.bn.dll.%System%\Codecs\Lang\mpcresources.be.dll.%System%\Codecs\Lang\mpcresources.ar.dll.%System%\Codecs\LAVFilters\ → renamed to swscale-lav-5.dll.%System%\Codecs\LAVFilters\ → renamed to libbluray.dll.%System%\Codecs\LAVFilters\ → renamed to avutil-lav-56.dll.%System%\Codecs\LAVFilters\ → renamed to avresample-lav-4.dll.%System%\Codecs\LAVFilters\ → renamed to avformat-lav-58.dll.%System%\Codecs\LAVFilters\ → renamed to avfilter-lav-7.dll.%System%\Codecs\LAVFilters\ → renamed to avcodec-lav-58.dll.%System%\Codecs\LAVFilters\LAVVideo.ax.new → renamed to LAVVideo.ax.%System%\Codecs\LAVFilters\LAVSplitter.ax.new → renamed to LAVSplitter.ax.%System%\Codecs\LAVFilters\ → renamed to.%System%\Codecs\LAVFilters\LAVAudio.ax.new → renamed to LAVAudio.ax.%System%\Codecs\LAVFilters\ → renamed to IntelQuickSyncDecoder.dll.%System%\Codecs\ → renamed to DisableUpdateChecker.exe.%System%\Codecs\ → renamed to Config.exe.%System%\Codecs\ → renamed to Compressor.dll.%System%\Codecs\ → renamed to CodecUACManager.exe.%System%\Codecs\ → renamed to CodecSettingsADMIN.exe.%System%\Codecs\ → renamed to CodecSettings.exe.
%System%\Codecs\CleanUp_圆4.exe.new → renamed to CleanUp_圆4.exe.%System%\Codecs\ → renamed to CleanUp.exe.%System%\Codecs\ → renamed to AudioProfiler.exe.%System%\Codecs\ → renamed to AppDialog.exe.%System%\Codecs\ → renamed to AC3Lib.dll.%Common Programs%\Media Player - Codec Pack\Uninstall.lnk.%Common Programs%\Media Player - Codec Pack\Package Homepage.url.%Common Programs%\Media Player - Codec Pack\Media Player Classic.lnk.%Common Programs%\Media Player - Codec Pack\Codec Settings.lnk.%Common Programs%\Media Player - Codec Pack\Codec Settings (Run as administrator).lnk.It drops the following component file(s):
%User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\\AppData\Local\Temp on Windows Vista, 7, 8, 8.1, 2008(64-bit), 2012(64-bit) and 10(64-bit).) %System% is the Windows system folder, where it usually is C:\Windows\System32 on all Windows operating system versions. (Note: %Common Programs% is the folder that contains common program groups for all users, which is usually C:\Documents and Settings\All Users\Start Menu\Programs on Windows 2000, XP, and Server 2003, or C:\ProgramData\Microsoft\Windows\Start Menu\Programs on Windows Vista, 7, and 8.
This Potentially Unwanted Application arrives on a system as a file dropped by other malware or as a file downloaded unknowingly by users when visiting malicious sites.