Trojan.MulDrop7.27358

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Classes\MSProgramGroup\Shell\Open\Command] '' = '<SYSTEM32>\grpconv.exe %1'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\grpconv.exe' -o
'<SYSTEM32>\runonce.exe' -r
'<SYSTEM32>\rundll32.exe' setupapi,InstallHinfSection DefaultInstall 132 %TEMP%\RarSFX0\AIOAero.inf

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Cursors\Aero\SET37.tmp
%WINDIR%\Cursors\Aero\SET38.tmp
%WINDIR%\Cursors\Aero\SET36.tmp
%WINDIR%\Cursors\Aero\SET34.tmp
%WINDIR%\Cursors\Aero\SET35.tmp
%WINDIR%\Cursors\Aero\SET3C.tmp
%WINDIR%\Cursors\Aero\SET3D.tmp
%WINDIR%\Cursors\Aero\SET3B.tmp
%WINDIR%\Cursors\Aero\SET39.tmp
%WINDIR%\Cursors\Aero\SET3A.tmp
%WINDIR%\Cursors\Aero\SET2D.tmp
%WINDIR%\Cursors\Aero\SET2E.tmp
%WINDIR%\Cursors\Aero\SET2C.tmp
%WINDIR%\Cursors\Aero\SET2A.tmp
%WINDIR%\Cursors\Aero\SET2B.tmp
%WINDIR%\Cursors\Aero\SET32.tmp
%WINDIR%\Cursors\Aero\SET33.tmp
%WINDIR%\Cursors\Aero\SET31.tmp
%WINDIR%\Cursors\Aero\SET2F.tmp
%WINDIR%\Cursors\Aero\SET30.tmp
%WINDIR%\Cursors\Aero\SET4B.tmp
%WINDIR%\Cursors\Aero\SET4C.tmp
%WINDIR%\Cursors\Aero\SET4A.tmp
%WINDIR%\Cursors\Aero\SET48.tmp
%WINDIR%\Cursors\Aero\SET49.tmp
%WINDIR%\Cursors\Aero\SET50.tmp
%WINDIR%\Cursors\Aero\SET51.tmp
%WINDIR%\Cursors\Aero\SET4F.tmp
%WINDIR%\Cursors\Aero\SET4D.tmp
%WINDIR%\Cursors\Aero\SET4E.tmp
%WINDIR%\Cursors\Aero\SET41.tmp
%WINDIR%\Cursors\Aero\SET42.tmp
%WINDIR%\Cursors\Aero\SET40.tmp
%WINDIR%\Cursors\Aero\SET3E.tmp
%WINDIR%\Cursors\Aero\SET3F.tmp
%WINDIR%\Cursors\Aero\SET46.tmp
%WINDIR%\Cursors\Aero\SET47.tmp
%WINDIR%\Cursors\Aero\SET45.tmp
%WINDIR%\Cursors\Aero\SET43.tmp
%WINDIR%\Cursors\Aero\SET44.tmp
%WINDIR%\Cursors\Aero\SETF.tmp
%WINDIR%\Cursors\Aero\SET10.tmp
%WINDIR%\Cursors\Aero\SETE.tmp
%WINDIR%\Cursors\Aero\SETC.tmp
%WINDIR%\Cursors\Aero\SETD.tmp
%WINDIR%\Cursors\Aero\SET14.tmp
%WINDIR%\Cursors\Aero\SET15.tmp
%WINDIR%\Cursors\Aero\SET13.tmp
%WINDIR%\Cursors\Aero\SET11.tmp
%WINDIR%\Cursors\Aero\SET12.tmp
%WINDIR%\Cursors\Aero\SET5.tmp
%WINDIR%\Cursors\Aero\SET6.tmp
%WINDIR%\Cursors\Aero\SET4.tmp
%TEMP%\RarSFX0\Entries_AIO_Vista_Aero_Cursors.ini
%WINDIR%\Cursors\Aero\SET3.tmp
%WINDIR%\Cursors\Aero\SETA.tmp
%WINDIR%\Cursors\Aero\SETB.tmp
%WINDIR%\Cursors\Aero\SET9.tmp
%WINDIR%\Cursors\Aero\SET7.tmp
%WINDIR%\Cursors\Aero\SET8.tmp
%WINDIR%\Cursors\Aero\SET23.tmp
%WINDIR%\Cursors\Aero\SET24.tmp
%WINDIR%\Cursors\Aero\SET22.tmp
%WINDIR%\Cursors\Aero\SET20.tmp
%WINDIR%\Cursors\Aero\SET21.tmp
%WINDIR%\Cursors\Aero\SET28.tmp
%WINDIR%\Cursors\Aero\SET29.tmp
%WINDIR%\Cursors\Aero\SET27.tmp
%WINDIR%\Cursors\Aero\SET25.tmp
%WINDIR%\Cursors\Aero\SET26.tmp
%WINDIR%\Cursors\Aero\SET19.tmp
%WINDIR%\Cursors\Aero\SET1A.tmp
%WINDIR%\Cursors\Aero\SET18.tmp
%WINDIR%\Cursors\Aero\SET16.tmp
%WINDIR%\Cursors\Aero\SET17.tmp
%WINDIR%\Cursors\Aero\SET1E.tmp
%WINDIR%\Cursors\Aero\SET1F.tmp
%WINDIR%\Cursors\Aero\SET1D.tmp
%WINDIR%\Cursors\Aero\SET1B.tmp
%WINDIR%\Cursors\Aero\SET1C.tmp
%WINDIR%\Cursors\Aero\SET87.tmp
%WINDIR%\Cursors\Aero\SET88.tmp
%WINDIR%\Cursors\Aero\SET86.tmp
%WINDIR%\Cursors\Aero\SET84.tmp
%WINDIR%\Cursors\Aero\SET85.tmp
%WINDIR%\Cursors\Aero\SET8C.tmp
%WINDIR%\Cursors\Aero\SET8D.tmp
%WINDIR%\Cursors\Aero\SET8B.tmp
%WINDIR%\Cursors\Aero\SET89.tmp
%WINDIR%\Cursors\Aero\SET8A.tmp
%WINDIR%\Cursors\Aero\SET7D.tmp
%WINDIR%\Cursors\Aero\SET7E.tmp
%WINDIR%\Cursors\Aero\SET7C.tmp
%WINDIR%\Cursors\Aero\SET7A.tmp
%WINDIR%\Cursors\Aero\SET7B.tmp
%WINDIR%\Cursors\Aero\SET82.tmp
%WINDIR%\Cursors\Aero\SET83.tmp
%WINDIR%\Cursors\Aero\SET81.tmp
%WINDIR%\Cursors\Aero\SET7F.tmp
%WINDIR%\Cursors\Aero\SET80.tmp
%WINDIR%\Cursors\Aero\SET9B.tmp
%WINDIR%\Cursors\Aero\SET9C.tmp
%WINDIR%\Cursors\Aero\SET9A.tmp
%WINDIR%\Cursors\Aero\SET98.tmp
%WINDIR%\Cursors\Aero\SET99.tmp
%WINDIR%\Cursors\Aero\SETA0.tmp
%WINDIR%\Cursors\Aero\SETA1.tmp
%WINDIR%\Cursors\Aero\SET9F.tmp
%WINDIR%\Cursors\Aero\SET9D.tmp
%WINDIR%\Cursors\Aero\SET9E.tmp
%WINDIR%\Cursors\Aero\SET91.tmp
%WINDIR%\Cursors\Aero\SET92.tmp
%WINDIR%\Cursors\Aero\SET90.tmp
%WINDIR%\Cursors\Aero\SET8E.tmp
%WINDIR%\Cursors\Aero\SET8F.tmp
%WINDIR%\Cursors\Aero\SET96.tmp
%WINDIR%\Cursors\Aero\SET97.tmp
%WINDIR%\Cursors\Aero\SET95.tmp
%WINDIR%\Cursors\Aero\SET93.tmp
%WINDIR%\Cursors\Aero\SET94.tmp
%WINDIR%\Cursors\Aero\SET5F.tmp
%WINDIR%\Cursors\Aero\SET60.tmp
%WINDIR%\Cursors\Aero\SET5E.tmp
%WINDIR%\Cursors\Aero\SET5C.tmp
%WINDIR%\Cursors\Aero\SET5D.tmp
%WINDIR%\Cursors\Aero\SET64.tmp
%WINDIR%\Cursors\Aero\SET65.tmp
%WINDIR%\Cursors\Aero\SET63.tmp
%WINDIR%\Cursors\Aero\SET61.tmp
%WINDIR%\Cursors\Aero\SET62.tmp
%WINDIR%\Cursors\Aero\SET55.tmp
%WINDIR%\Cursors\Aero\SET56.tmp
%WINDIR%\Cursors\Aero\SET54.tmp
%WINDIR%\Cursors\Aero\SET52.tmp
%WINDIR%\Cursors\Aero\SET53.tmp
%WINDIR%\Cursors\Aero\SET5A.tmp
%WINDIR%\Cursors\Aero\SET5B.tmp
%WINDIR%\Cursors\Aero\SET59.tmp
%WINDIR%\Cursors\Aero\SET57.tmp
%WINDIR%\Cursors\Aero\SET58.tmp
%WINDIR%\Cursors\Aero\SET73.tmp
%WINDIR%\Cursors\Aero\SET74.tmp
%WINDIR%\Cursors\Aero\SET72.tmp
%WINDIR%\Cursors\Aero\SET70.tmp
%WINDIR%\Cursors\Aero\SET71.tmp
%WINDIR%\Cursors\Aero\SET78.tmp
%WINDIR%\Cursors\Aero\SET79.tmp
%WINDIR%\Cursors\Aero\SET77.tmp
%WINDIR%\Cursors\Aero\SET75.tmp
%WINDIR%\Cursors\Aero\SET76.tmp
%WINDIR%\Cursors\Aero\SET69.tmp
%WINDIR%\Cursors\Aero\SET6A.tmp
%WINDIR%\Cursors\Aero\SET68.tmp
%WINDIR%\Cursors\Aero\SET66.tmp
%WINDIR%\Cursors\Aero\SET67.tmp
%WINDIR%\Cursors\Aero\SET6E.tmp
%WINDIR%\Cursors\Aero\SET6F.tmp
%WINDIR%\Cursors\Aero\SET6D.tmp
%WINDIR%\Cursors\Aero\SET6B.tmp
%WINDIR%\Cursors\Aero\SET6C.tmp
%TEMP%\RarSFX0\i386\aero_move_xl.cur
%TEMP%\RarSFX0\i386\aero_nesw.cur
%TEMP%\RarSFX0\i386\aero_move_l.cur
%TEMP%\RarSFX0\i386\aero_move1.cur
%TEMP%\RarSFX0\i386\aero_move_b.cur
%TEMP%\RarSFX0\i386\aero_nesw_xl.cur
%TEMP%\RarSFX0\i386\aero_ns.cur
%TEMP%\RarSFX0\i386\aero_nesw_l.cur
%TEMP%\RarSFX0\i386\aero_nesw1.cur
%TEMP%\RarSFX0\i386\aero_nesw_b.cur
%TEMP%\RarSFX0\i386\aero_helpsel_xl.cur
%TEMP%\RarSFX0\i386\aero_link.cur
%TEMP%\RarSFX0\i386\aero_helpsel_l.cur
%TEMP%\RarSFX0\i386\aero_helpsel1.cur
%TEMP%\RarSFX0\i386\aero_helpsel_b.cur
%TEMP%\RarSFX0\i386\aero_link_xl.cur
%TEMP%\RarSFX0\i386\aero_move.cur
%TEMP%\RarSFX0\i386\aero_link_l.cur
%TEMP%\RarSFX0\i386\aero_link1.cur
%TEMP%\RarSFX0\i386\aero_link_b.cur
%TEMP%\RarSFX0\i386\aero_prec.cur
%TEMP%\RarSFX0\i386\aero_prec_l.cur
%TEMP%\RarSFX0\i386\aero_pen_xl.cur
%TEMP%\RarSFX0\i386\aero_pen_b.cur
%TEMP%\RarSFX0\i386\aero_pen_l.cur
%TEMP%\RarSFX0\i386\aero_select_xl.cur
%TEMP%\RarSFX0\i386\aero_text_b.cur
%TEMP%\RarSFX0\i386\aero_select_l.cur
%TEMP%\RarSFX0\i386\aero_prec_xl.cur
%TEMP%\RarSFX0\i386\aero_select.cur
%TEMP%\RarSFX0\i386\aero_ns_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse.cur
%TEMP%\RarSFX0\i386\aero_ns_l.cur
%TEMP%\RarSFX0\i386\aero_ns1.cur
%TEMP%\RarSFX0\i386\aero_ns_b.cur
%TEMP%\RarSFX0\i386\aero_nwse_xl.cur
%TEMP%\RarSFX0\i386\aero_pen.cur
%TEMP%\RarSFX0\i386\aero_nwse_l.cur
%TEMP%\RarSFX0\i386\aero_nwse1.cur
%TEMP%\RarSFX0\i386\aero_nwse_b.cur
%TEMP%\RarSFX0\i386\AeroII Unavailable.cur
%TEMP%\RarSFX0\i386\AeroII Working In Backround.ani
%TEMP%\RarSFX0\i386\AeroII Text Select.cur
%TEMP%\RarSFX0\i386\AeroII Size Horz.cur
%TEMP%\RarSFX0\i386\AeroII Size Vert.cur
%TEMP%\RarSFX0\i386\aero_arrow_b.cur
%TEMP%\RarSFX0\i386\aero_arrow_l.cur
%TEMP%\RarSFX0\i386\aero_arrow1.cur
%TEMP%\RarSFX0\i386\aero_alt.cur
%TEMP%\RarSFX0\i386\aero_arrow.cur
%TEMP%\RarSFX0\i386\AeroII Hand.ani
%TEMP%\RarSFX0\i386\AeroII Handwriting.cur
%TEMP%\RarSFX0\i386\AeroII Cross.cur
%TEMP%\RarSFX0\i386\AeroII Alternate.cur
%TEMP%\RarSFX0\i386\AeroII Busy.ani
%TEMP%\RarSFX0\i386\AeroII Resize Left.cur
%TEMP%\RarSFX0\i386\AeroII Resize Right.cur
%TEMP%\RarSFX0\i386\AeroII Resize All.cur
%TEMP%\RarSFX0\i386\AeroII Help Select.cur
%TEMP%\RarSFX0\i386\AeroII Normal Select.cur
%TEMP%\RarSFX0\i386\aero_cross_b.cur
%TEMP%\RarSFX0\i386\aero_ew.cur
%TEMP%\RarSFX0\i386\aero_busy_xl.ani
%TEMP%\RarSFX0\i386\aero_busy_red.ani
%TEMP%\RarSFX0\i386\aero_busy_silver.ani
%TEMP%\RarSFX0\i386\aero_ew_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel.cur
%TEMP%\RarSFX0\i386\aero_ew_l.cur
%TEMP%\RarSFX0\i386\aero_ew1.cur
%TEMP%\RarSFX0\i386\aero_ew_b.cur
%TEMP%\RarSFX0\i386\aero_busy_b.ani
%TEMP%\RarSFX0\i386\aero_busy_black.ani
%TEMP%\RarSFX0\i386\aero_busy1.ani
%TEMP%\RarSFX0\i386\aero_arrow_xl.cur
%TEMP%\RarSFX0\i386\aero_busy.ani
%TEMP%\RarSFX0\i386\aero_busy_ngreen.ani
%TEMP%\RarSFX0\i386\aero_busy_pink.ani
%TEMP%\RarSFX0\i386\aero_busy_l.ani
%TEMP%\RarSFX0\i386\aero_busy_blue.ani
%TEMP%\RarSFX0\i386\aero_busy_dgreen.ani
%TEMP%\RarSFX0\i386\HSpin Tranparent Text.cur
%TEMP%\RarSFX0\i386\HSpin Transparent Press.cur
%TEMP%\RarSFX0\i386\HighSpin2 Work.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Red.ani
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Link.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Move.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Help.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Arrow.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents EW.cur
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Red.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Black.ani
%TEMP%\RarSFX0\i386\HighSpin2 Work Blue.ani
%TEMP%\RarSFX0\i386\TextSelect.cur
%TEMP%\RarSFX0\i386\text_ba.cur
%TEMP%\RarSFX0\i386\PrecisionSelect.cur
%TEMP%\RarSFX0\i386\nwse_ba.cur
%TEMP%\RarSFX0\i386\pen_ba.cur
%TEMP%\RarSFX0\i386\working_ba.ani
%TEMP%\RarSFX0\AIOAero.inf
%TEMP%\RarSFX0\i386\we_ba.cur
%TEMP%\RarSFX0\i386\unavail_ba.cur
%TEMP%\RarSFX0\i386\up_ba.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Pen.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Unavail.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NWSE.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NESW.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents NS.cur
%TEMP%\RarSFX0\i386\nesw_ba.cur
%TEMP%\RarSFX0\i386\ns_ba.cur
%TEMP%\RarSFX0\i386\move_ba.cur
%TEMP%\RarSFX0\i386\HSpin2 Tranparents Up.cur
%TEMP%\RarSFX0\i386\link_ba.cur
%TEMP%\RarSFX0\i386\aero_working_black.ani
%TEMP%\RarSFX0\i386\aero_working_blue.ani
%TEMP%\RarSFX0\i386\aero_working_b.ani
%TEMP%\RarSFX0\i386\aero_working.ani
%TEMP%\RarSFX0\i386\aero_working1.ani
%TEMP%\RarSFX0\i386\aero_working_pink.ani
%TEMP%\RarSFX0\i386\aero_working_red.ani
%TEMP%\RarSFX0\i386\aero_working_ngreen.ani
%TEMP%\RarSFX0\i386\aero_working_dgreen.ani
%TEMP%\RarSFX0\i386\aero_working_l.ani
%TEMP%\RarSFX0\i386\aero_unavail_l.cur
%TEMP%\RarSFX0\i386\aero_unavail_xl.cur
%TEMP%\RarSFX0\i386\aero_unavail_b.cur
%TEMP%\RarSFX0\i386\aero_unavail.cur
%TEMP%\RarSFX0\i386\aero_unavail1.cur
%TEMP%\RarSFX0\i386\aero_up_l.cur
%TEMP%\RarSFX0\i386\aero_up_xl.cur
%TEMP%\RarSFX0\i386\aero_up_b.cur
%TEMP%\RarSFX0\i386\aero_up.cur
%TEMP%\RarSFX0\i386\aero_up1.cur
%TEMP%\RarSFX0\i386\HighSpin2 2nd Orange.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Pink.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Black.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Blue.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Blue.ani
%TEMP%\RarSFX0\i386\HighSpin2 SM2nd Green.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Purple.ani
%TEMP%\RarSFX0\i386\HighSpin2 2nd Red.ani
%TEMP%\RarSFX0\i386\Black trans.ani
%TEMP%\RarSFX0\i386\busy_ba.ani
%TEMP%\RarSFX0\i386\arrow_ba.cur
%TEMP%\RarSFX0\i386\aero_working_silver.ani
%TEMP%\RarSFX0\i386\aero_working_xl.ani
%TEMP%\RarSFX0\i386\gold2nd.ani
%TEMP%\RarSFX0\i386\helpse_bal.cur
%TEMP%\RarSFX0\i386\gold2nd work.ani
%TEMP%\RarSFX0\i386\cross_ba.cur
%TEMP%\RarSFX0\i386\gold2nd trans.ani

Удаляет следующие файлы:

%TEMP%\RarSFX0\i386\aero_link1.cur
%TEMP%\RarSFX0\i386\aero_link_b.cur
%TEMP%\RarSFX0\i386\aero_helpsel_xl.cur
%TEMP%\RarSFX0\i386\aero_link.cur
%TEMP%\RarSFX0\i386\aero_move.cur
%TEMP%\RarSFX0\i386\aero_move1.cur
%TEMP%\RarSFX0\i386\aero_link_l.cur
%TEMP%\RarSFX0\i386\aero_link_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel_l.cur
%TEMP%\RarSFX0\i386\aero_ew_b.cur
%TEMP%\RarSFX0\i386\aero_ew_l.cur
%TEMP%\RarSFX0\i386\aero_ew.cur
%TEMP%\RarSFX0\i386\aero_ew1.cur
%TEMP%\RarSFX0\i386\aero_helpsel1.cur
%TEMP%\RarSFX0\i386\aero_helpsel_b.cur
%TEMP%\RarSFX0\i386\aero_ew_xl.cur
%TEMP%\RarSFX0\i386\aero_helpsel.cur
%TEMP%\RarSFX0\i386\aero_move_b.cur
%TEMP%\RarSFX0\i386\aero_ns_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse.cur
%TEMP%\RarSFX0\i386\aero_ns_b.cur
%TEMP%\RarSFX0\i386\aero_ns_l.cur
%TEMP%\RarSFX0\i386\aero_nwse_l.cur
%TEMP%\RarSFX0\i386\aero_nwse_xl.cur
%TEMP%\RarSFX0\i386\aero_nwse1.cur
%TEMP%\RarSFX0\i386\aero_nwse_b.cur
%TEMP%\RarSFX0\i386\aero_ns1.cur
%TEMP%\RarSFX0\i386\aero_nesw.cur
%TEMP%\RarSFX0\i386\aero_nesw1.cur
%TEMP%\RarSFX0\i386\aero_move_l.cur
%TEMP%\RarSFX0\i386\aero_move_xl.cur
%TEMP%\RarSFX0\i386\aero_nesw_xl.cur
%TEMP%\RarSFX0\i386\aero_ns.cur
%TEMP%\RarSFX0\i386\aero_nesw_b.cur
%TEMP%\RarSFX0\i386\aero_nesw_l.cur
%TEMP%\RarSFX0\i386\aero_cross_b.cur
%TEMP%\RarSFX0\i386\AeroII Resize Right.cur
%TEMP%\RarSFX0\i386\AeroII Size Horz.cur
%TEMP%\RarSFX0\i386\AeroII Resize All.cur
%TEMP%\RarSFX0\i386\AeroII Resize Left.cur
%TEMP%\RarSFX0\i386\AeroII Unavailable.cur
%TEMP%\RarSFX0\i386\AeroII Working In Backround.ani
%TEMP%\RarSFX0\i386\AeroII Size Vert.cur
%TEMP%\RarSFX0\i386\AeroII Text Select.cur
%TEMP%\RarSFX0\i386\AeroII Normal Select.cur
%TEMP%\RarSFX0\i386\AeroII Alternate.cur
%TEMP%\RarSFX0\i386\AeroII Busy.ani
%TEMP%\RarSFX0\AIOAero.inf
%TEMP%\RarSFX0\Entries_AIO_Vista_Aero_Cursors.ini
%TEMP%\RarSFX0\i386\AeroII Handwriting.cur
%TEMP%\RarSFX0\i386\AeroII Help Select.cur
%TEMP%\RarSFX0\i386\AeroII Cross.cur
%TEMP%\RarSFX0\i386\AeroII Hand.ani
%TEMP%\RarSFX0\i386\aero_alt.cur
%TEMP%\RarSFX0\i386\aero_busy_l.ani
%TEMP%\RarSFX0\i386\aero_busy_ngreen.ani
%TEMP%\RarSFX0\i386\aero_busy_blue.ani
%TEMP%\RarSFX0\i386\aero_busy_dgreen.ani
%TEMP%\RarSFX0\i386\aero_busy_silver.ani
%TEMP%\RarSFX0\i386\aero_busy_xl.ani
%TEMP%\RarSFX0\i386\aero_busy_pink.ani
%TEMP%\RarSFX0\i386\aero_busy_red.ani
%TEMP%\RarSFX0\i386\aero_busy_black.ani
%TEMP%\RarSFX0\i386\aero_arrow_b.cur
%TEMP%\RarSFX0\i386\aero_arrow_l.cur
%TEMP%\RarSFX0\i386\aero_arrow.cur
%TEMP%\RarSFX0\i386\aero_arrow1.cur
%TEMP%\RarSFX0\i386\aero_busy1.ani
%TEMP%\RarSFX0\i386\aero_busy_b.ani
%TEMP%\RarSFX0\i386\aero_arrow_xl.cur
%TEMP%\RarSFX0\i386\aero_busy.ani

Перемещает следующие файлы:

%WINDIR%\Cursors\Aero\SET6D.tmp в %WINDIR%\Cursors\Aero\gold2nd trans.ani
%WINDIR%\Cursors\Aero\SET6C.tmp в %WINDIR%\Cursors\Aero\cross_ba.cur
%WINDIR%\Cursors\Aero\SET6F.tmp в %WINDIR%\Cursors\Aero\gold2nd.ani
%WINDIR%\Cursors\Aero\SET6E.tmp в %WINDIR%\Cursors\Aero\gold2nd work.ani
%WINDIR%\Cursors\Aero\SET6B.tmp в %WINDIR%\Cursors\Aero\busy_ba.ani
%WINDIR%\Cursors\Aero\SET68.tmp в %WINDIR%\Cursors\Aero\AeroII Working In Backround.ani
%WINDIR%\Cursors\Aero\SET67.tmp в %WINDIR%\Cursors\Aero\AeroII Unavailable.cur
%WINDIR%\Cursors\Aero\SET6A.tmp в %WINDIR%\Cursors\Aero\Black trans.ani
%WINDIR%\Cursors\Aero\SET69.tmp в %WINDIR%\Cursors\Aero\arrow_ba.cur
%WINDIR%\Cursors\Aero\SET70.tmp в %WINDIR%\Cursors\Aero\helpse_bal.cur
%WINDIR%\Cursors\Aero\SET77.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Red.ani
%WINDIR%\Cursors\Aero\SET76.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Purple.ani
%WINDIR%\Cursors\Aero\SET79.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Blue.ani
%WINDIR%\Cursors\Aero\SET78.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd.ani
%WINDIR%\Cursors\Aero\SET75.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Pink.ani
%WINDIR%\Cursors\Aero\SET72.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Blue.ani
%WINDIR%\Cursors\Aero\SET71.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Black.ani
%WINDIR%\Cursors\Aero\SET74.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Orange.ani
%WINDIR%\Cursors\Aero\SET73.tmp в %WINDIR%\Cursors\Aero\HighSpin2 2nd Green.ani
%WINDIR%\Cursors\Aero\SET66.tmp в %WINDIR%\Cursors\Aero\AeroII Text Select.cur
%WINDIR%\Cursors\Aero\SET59.tmp в %WINDIR%\Cursors\Aero\aero_working_xl.ani
%WINDIR%\Cursors\Aero\SET58.tmp в %WINDIR%\Cursors\Aero\aero_working_silver.ani
%WINDIR%\Cursors\Aero\SET5B.tmp в %WINDIR%\Cursors\Aero\AeroII Busy.ani
%WINDIR%\Cursors\Aero\SET5A.tmp в %WINDIR%\Cursors\Aero\AeroII Alternate.cur
%WINDIR%\Cursors\Aero\SET57.tmp в %WINDIR%\Cursors\Aero\aero_working_red.ani
%WINDIR%\Cursors\Aero\SET54.tmp в %WINDIR%\Cursors\Aero\aero_working_l.ani
%WINDIR%\Cursors\Aero\SET53.tmp в %WINDIR%\Cursors\Aero\aero_working_dgreen.ani
%WINDIR%\Cursors\Aero\SET56.tmp в %WINDIR%\Cursors\Aero\aero_working_pink.ani
%WINDIR%\Cursors\Aero\SET55.tmp в %WINDIR%\Cursors\Aero\aero_working_ngreen.ani
%WINDIR%\Cursors\Aero\SET5C.tmp в %WINDIR%\Cursors\Aero\AeroII Cross.cur
%WINDIR%\Cursors\Aero\SET63.tmp в %WINDIR%\Cursors\Aero\AeroII Resize Right.cur
%WINDIR%\Cursors\Aero\SET62.tmp в %WINDIR%\Cursors\Aero\AeroII Resize Left.cur
%WINDIR%\Cursors\Aero\SET65.tmp в %WINDIR%\Cursors\Aero\AeroII Size Vert.cur
%WINDIR%\Cursors\Aero\SET64.tmp в %WINDIR%\Cursors\Aero\AeroII Size Horz.cur
%WINDIR%\Cursors\Aero\SET61.tmp в %WINDIR%\Cursors\Aero\AeroII Resize All.cur
%WINDIR%\Cursors\Aero\SET5E.tmp в %WINDIR%\Cursors\Aero\AeroII Handwriting.cur
%WINDIR%\Cursors\Aero\SET5D.tmp в %WINDIR%\Cursors\Aero\AeroII Hand.ani
%WINDIR%\Cursors\Aero\SET60.tmp в %WINDIR%\Cursors\Aero\AeroII Normal Select.cur
%WINDIR%\Cursors\Aero\SET5F.tmp в %WINDIR%\Cursors\Aero\AeroII Help Select.cur
%WINDIR%\Cursors\Aero\SET7A.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Green.ani
%WINDIR%\Cursors\Aero\SET95.tmp в %WINDIR%\Cursors\Aero\link_ba.cur
%WINDIR%\Cursors\Aero\SET94.tmp в %WINDIR%\Cursors\Aero\HSpin Transparent Press.cur
%WINDIR%\Cursors\Aero\SET97.tmp в %WINDIR%\Cursors\Aero\nesw_ba.cur
%WINDIR%\Cursors\Aero\SET96.tmp в %WINDIR%\Cursors\Aero\move_ba.cur
%WINDIR%\Cursors\Aero\SET93.tmp в %WINDIR%\Cursors\Aero\HSpin Tranparent Text.cur
%WINDIR%\Cursors\Aero\SET90.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Pen.cur
%WINDIR%\Cursors\Aero\SET8F.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents NWSE.cur
%WINDIR%\Cursors\Aero\SET92.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Up.cur
%WINDIR%\Cursors\Aero\SET91.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Unavail.cur
%WINDIR%\Cursors\Aero\SET98.tmp в %WINDIR%\Cursors\Aero\ns_ba.cur
%WINDIR%\Cursors\Aero\SET9F.tmp в %WINDIR%\Cursors\Aero\up_ba.cur
%WINDIR%\Cursors\Aero\SET9E.tmp в %WINDIR%\Cursors\Aero\unavail_ba.cur
%WINDIR%\Cursors\Aero\SETA1.tmp в %WINDIR%\Cursors\Aero\working_ba.ani
%WINDIR%\Cursors\Aero\SETA0.tmp в %WINDIR%\Cursors\Aero\we_ba.cur
%WINDIR%\Cursors\Aero\SET9D.tmp в %WINDIR%\Cursors\Aero\TextSelect.cur
%WINDIR%\Cursors\Aero\SET9A.tmp в %WINDIR%\Cursors\Aero\pen_ba.cur
%WINDIR%\Cursors\Aero\SET99.tmp в %WINDIR%\Cursors\Aero\nwse_ba.cur
%WINDIR%\Cursors\Aero\SET9C.tmp в %WINDIR%\Cursors\Aero\text_ba.cur
%WINDIR%\Cursors\Aero\SET9B.tmp в %WINDIR%\Cursors\Aero\PrecisionSelect.cur
%WINDIR%\Cursors\Aero\SET8E.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents NS.cur
%WINDIR%\Cursors\Aero\SET81.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Blue.ani
%WINDIR%\Cursors\Aero\SET80.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Black.ani
%WINDIR%\Cursors\Aero\SET83.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Orange.ani
%WINDIR%\Cursors\Aero\SET82.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Green.ani
%WINDIR%\Cursors\Aero\SET7F.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd.ani
%WINDIR%\Cursors\Aero\SET7C.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Pink.ani
%WINDIR%\Cursors\Aero\SET7B.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Orange.ani
%WINDIR%\Cursors\Aero\SET7E.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Red.ani
%WINDIR%\Cursors\Aero\SET7D.tmp в %WINDIR%\Cursors\Aero\HighSpin2 SM2nd Purple.ani
%WINDIR%\Cursors\Aero\SET84.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Pink.ani
%WINDIR%\Cursors\Aero\SET8B.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Link.cur
%WINDIR%\Cursors\Aero\SET8A.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Help.cur
%WINDIR%\Cursors\Aero\SET8D.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents NESW.cur
%WINDIR%\Cursors\Aero\SET8C.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Move.cur
%WINDIR%\Cursors\Aero\SET89.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents EW.cur
%WINDIR%\Cursors\Aero\SET86.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Red.ani
%WINDIR%\Cursors\Aero\SET85.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work Purple.ani
%WINDIR%\Cursors\Aero\SET88.tmp в %WINDIR%\Cursors\Aero\HSpin2 Tranparents Arrow.cur
%WINDIR%\Cursors\Aero\SET87.tmp в %WINDIR%\Cursors\Aero\HighSpin2 Work.ani
%WINDIR%\Cursors\Aero\SET52.tmp в %WINDIR%\Cursors\Aero\aero_working_blue.ani
%WINDIR%\Cursors\Aero\SET1D.tmp в %WINDIR%\Cursors\Aero\aero_helpsel_b.cur
%WINDIR%\Cursors\Aero\SET1C.tmp в %WINDIR%\Cursors\Aero\aero_helpsel.cur
%WINDIR%\Cursors\Aero\SET1F.tmp в %WINDIR%\Cursors\Aero\aero_helpsel_xl.cur
%WINDIR%\Cursors\Aero\SET1E.tmp в %WINDIR%\Cursors\Aero\aero_helpsel_l.cur
%WINDIR%\Cursors\Aero\SET1B.tmp в %WINDIR%\Cursors\Aero\aero_helpsel1.cur
%WINDIR%\Cursors\Aero\SET18.tmp в %WINDIR%\Cursors\Aero\aero_ew_b.cur
%WINDIR%\Cursors\Aero\SET17.tmp в %WINDIR%\Cursors\Aero\aero_ew.cur
%WINDIR%\Cursors\Aero\SET1A.tmp в %WINDIR%\Cursors\Aero\aero_ew_xl.cur
%WINDIR%\Cursors\Aero\SET19.tmp в %WINDIR%\Cursors\Aero\aero_ew_l.cur
%WINDIR%\Cursors\Aero\SET20.tmp в %WINDIR%\Cursors\Aero\aero_link1.cur
%WINDIR%\Cursors\Aero\SET27.tmp в %WINDIR%\Cursors\Aero\aero_move_b.cur
%WINDIR%\Cursors\Aero\SET26.tmp в %WINDIR%\Cursors\Aero\aero_move.cur
%WINDIR%\Cursors\Aero\SET29.tmp в %WINDIR%\Cursors\Aero\aero_move_xl.cur
%WINDIR%\Cursors\Aero\SET28.tmp в %WINDIR%\Cursors\Aero\aero_move_l.cur
%WINDIR%\Cursors\Aero\SET25.tmp в %WINDIR%\Cursors\Aero\aero_move1.cur
%WINDIR%\Cursors\Aero\SET22.tmp в %WINDIR%\Cursors\Aero\aero_link_b.cur
%WINDIR%\Cursors\Aero\SET21.tmp в %WINDIR%\Cursors\Aero\aero_link.cur
%WINDIR%\Cursors\Aero\SET24.tmp в %WINDIR%\Cursors\Aero\aero_link_xl.cur
%WINDIR%\Cursors\Aero\SET23.tmp в %WINDIR%\Cursors\Aero\aero_link_l.cur
%WINDIR%\Cursors\Aero\SET16.tmp в %WINDIR%\Cursors\Aero\aero_ew1.cur
%WINDIR%\Cursors\Aero\SET9.tmp в %WINDIR%\Cursors\Aero\aero_busy1.ani
%WINDIR%\Cursors\Aero\SET8.tmp в %WINDIR%\Cursors\Aero\aero_arrow_xl.cur
%WINDIR%\Cursors\Aero\SETB.tmp в %WINDIR%\Cursors\Aero\aero_busy_b.ani
%WINDIR%\Cursors\Aero\SETA.tmp в %WINDIR%\Cursors\Aero\aero_busy.ani
%WINDIR%\Cursors\Aero\SET7.tmp в %WINDIR%\Cursors\Aero\aero_arrow_l.cur
%WINDIR%\Cursors\Aero\SET4.tmp в %WINDIR%\Cursors\Aero\aero_arrow1.cur
%WINDIR%\Cursors\Aero\SET3.tmp в %WINDIR%\Cursors\Aero\aero_alt.cur
%WINDIR%\Cursors\Aero\SET6.tmp в %WINDIR%\Cursors\Aero\aero_arrow_b.cur
%WINDIR%\Cursors\Aero\SET5.tmp в %WINDIR%\Cursors\Aero\aero_arrow.cur
%WINDIR%\Cursors\Aero\SETC.tmp в %WINDIR%\Cursors\Aero\aero_busy_black.ani
%WINDIR%\Cursors\Aero\SET13.tmp в %WINDIR%\Cursors\Aero\aero_busy_silver.ani
%WINDIR%\Cursors\Aero\SET12.tmp в %WINDIR%\Cursors\Aero\aero_busy_red.ani
%WINDIR%\Cursors\Aero\SET15.tmp в %WINDIR%\Cursors\Aero\aero_cross_b.cur
%WINDIR%\Cursors\Aero\SET14.tmp в %WINDIR%\Cursors\Aero\aero_busy_xl.ani
%WINDIR%\Cursors\Aero\SET11.tmp в %WINDIR%\Cursors\Aero\aero_busy_pink.ani
%WINDIR%\Cursors\Aero\SETE.tmp в %WINDIR%\Cursors\Aero\aero_busy_dgreen.ani
%WINDIR%\Cursors\Aero\SETD.tmp в %WINDIR%\Cursors\Aero\aero_busy_blue.ani
%WINDIR%\Cursors\Aero\SET10.tmp в %WINDIR%\Cursors\Aero\aero_busy_ngreen.ani
%WINDIR%\Cursors\Aero\SETF.tmp в %WINDIR%\Cursors\Aero\aero_busy_l.ani
%WINDIR%\Cursors\Aero\SET2A.tmp в %WINDIR%\Cursors\Aero\aero_nesw1.cur
%WINDIR%\Cursors\Aero\SET45.tmp в %WINDIR%\Cursors\Aero\aero_unavail.cur
%WINDIR%\Cursors\Aero\SET44.tmp в %WINDIR%\Cursors\Aero\aero_unavail1.cur
%WINDIR%\Cursors\Aero\SET47.tmp в %WINDIR%\Cursors\Aero\aero_unavail_l.cur
%WINDIR%\Cursors\Aero\SET46.tmp в %WINDIR%\Cursors\Aero\aero_unavail_b.cur
%WINDIR%\Cursors\Aero\SET43.tmp в %WINDIR%\Cursors\Aero\aero_text_b.cur
%WINDIR%\Cursors\Aero\SET40.tmp в %WINDIR%\Cursors\Aero\aero_select.cur
%WINDIR%\Cursors\Aero\SET3F.tmp в %WINDIR%\Cursors\Aero\aero_prec_xl.cur
%WINDIR%\Cursors\Aero\SET42.tmp в %WINDIR%\Cursors\Aero\aero_select_xl.cur
%WINDIR%\Cursors\Aero\SET41.tmp в %WINDIR%\Cursors\Aero\aero_select_l.cur
%WINDIR%\Cursors\Aero\SET48.tmp в %WINDIR%\Cursors\Aero\aero_unavail_xl.cur
%WINDIR%\Cursors\Aero\SET4F.tmp в %WINDIR%\Cursors\Aero\aero_working.ani
%WINDIR%\Cursors\Aero\SET4E.tmp в %WINDIR%\Cursors\Aero\aero_working1.ani
%WINDIR%\Cursors\Aero\SET51.tmp в %WINDIR%\Cursors\Aero\aero_working_black.ani
%WINDIR%\Cursors\Aero\SET50.tmp в %WINDIR%\Cursors\Aero\aero_working_b.ani
%WINDIR%\Cursors\Aero\SET4D.tmp в %WINDIR%\Cursors\Aero\aero_up_xl.cur
%WINDIR%\Cursors\Aero\SET4A.tmp в %WINDIR%\Cursors\Aero\aero_up.cur
%WINDIR%\Cursors\Aero\SET49.tmp в %WINDIR%\Cursors\Aero\aero_up1.cur
%WINDIR%\Cursors\Aero\SET4C.tmp в %WINDIR%\Cursors\Aero\aero_up_l.cur
%WINDIR%\Cursors\Aero\SET4B.tmp в %WINDIR%\Cursors\Aero\aero_up_b.cur
%WINDIR%\Cursors\Aero\SET3E.tmp в %WINDIR%\Cursors\Aero\aero_prec_l.cur
%WINDIR%\Cursors\Aero\SET31.tmp в %WINDIR%\Cursors\Aero\aero_ns_b.cur
%WINDIR%\Cursors\Aero\SET30.tmp в %WINDIR%\Cursors\Aero\aero_ns.cur
%WINDIR%\Cursors\Aero\SET33.tmp в %WINDIR%\Cursors\Aero\aero_ns_xl.cur
%WINDIR%\Cursors\Aero\SET32.tmp в %WINDIR%\Cursors\Aero\aero_ns_l.cur
%WINDIR%\Cursors\Aero\SET2F.tmp в %WINDIR%\Cursors\Aero\aero_ns1.cur
%WINDIR%\Cursors\Aero\SET2C.tmp в %WINDIR%\Cursors\Aero\aero_nesw_b.cur
%WINDIR%\Cursors\Aero\SET2B.tmp в %WINDIR%\Cursors\Aero\aero_nesw.cur
%WINDIR%\Cursors\Aero\SET2E.tmp в %WINDIR%\Cursors\Aero\aero_nesw_xl.cur
%WINDIR%\Cursors\Aero\SET2D.tmp в %WINDIR%\Cursors\Aero\aero_nesw_l.cur
%WINDIR%\Cursors\Aero\SET34.tmp в %WINDIR%\Cursors\Aero\aero_nwse1.cur
%WINDIR%\Cursors\Aero\SET3B.tmp в %WINDIR%\Cursors\Aero\aero_pen_l.cur
%WINDIR%\Cursors\Aero\SET3A.tmp в %WINDIR%\Cursors\Aero\aero_pen_b.cur
%WINDIR%\Cursors\Aero\SET3D.tmp в %WINDIR%\Cursors\Aero\aero_prec.cur
%WINDIR%\Cursors\Aero\SET3C.tmp в %WINDIR%\Cursors\Aero\aero_pen_xl.cur
%WINDIR%\Cursors\Aero\SET39.tmp в %WINDIR%\Cursors\Aero\aero_pen.cur
%WINDIR%\Cursors\Aero\SET36.tmp в %WINDIR%\Cursors\Aero\aero_nwse_b.cur
%WINDIR%\Cursors\Aero\SET35.tmp в %WINDIR%\Cursors\Aero\aero_nwse.cur
%WINDIR%\Cursors\Aero\SET38.tmp в %WINDIR%\Cursors\Aero\aero_nwse_xl.cur
%WINDIR%\Cursors\Aero\SET37.tmp в %WINDIR%\Cursors\Aero\aero_nwse_l.cur

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней