Техническая информация
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\IXP000.TMP\W95INF32.DLL
- %TEMP%\IXP000.TMP\ADVPACK.DLL
- %WINDIR%\LastGood\TMP3.tmp
- %TEMP%\IXP000.TMP\W95INF16.DLL
- %TEMP%\IXP000.TMP\ctype.nls
- %TEMP%\IXP000.TMP\c_1258.nls
- %TEMP%\IXP000.TMP\sorttbls.nls
- %TEMP%\IXP000.TMP\sortkey.nls
- %WINDIR%\LastGood\TMP9.tmp
- <SYSTEM32>\SET8.tmp
- <SYSTEM32>\SETB.tmp
- %WINDIR%\Temp\OLDA.tmp
- <SYSTEM32>\SET5.tmp
- %WINDIR%\Temp\OLD4.tmp
- %WINDIR%\Temp\OLD7.tmp
- %WINDIR%\LastGood\TMP6.tmp
- %TEMP%\IXP000.TMP\timesbd.ttf
- %TEMP%\IXP000.TMP\times.ttf
- %TEMP%\IXP000.TMP\arial.ttf
- %TEMP%\IXP000.TMP\timesbi.ttf
- %TEMP%\IXP000.TMP\sseriffg.fon
- %TEMP%\IXP000.TMP\sseriffe.fon
- %TEMP%\IXP000.TMP\sserifft.fon
- %TEMP%\IXP000.TMP\sseriffr.fon
- %TEMP%\IXP000.TMP\c_1255.nls
- %TEMP%\IXP000.TMP\c_1254.nls
- %TEMP%\IXP000.TMP\c_1257.nls
- %TEMP%\IXP000.TMP\c_1256.nls
- %TEMP%\IXP000.TMP\c_1251.nls
- %TEMP%\IXP000.TMP\c_1250.nls
- %TEMP%\IXP000.TMP\c_1253.nls
- %TEMP%\IXP000.TMP\c_1252.nls
- %WINDIR%\LastGood\TMPC.tmp
- %WINDIR%\Temp\OLD1F.tmp
- %WINDIR%\LastGood\TMP1E.tmp
- <SYSTEM32>\dllcache\c_1253.nls.new
- <SYSTEM32>\SET20.tmp
- %WINDIR%\LastGood\TMP1B.tmp
- <SYSTEM32>\dllcache\c_1252.nls.new
- <SYSTEM32>\SET1D.tmp
- %WINDIR%\Temp\OLD1C.tmp
- <SYSTEM32>\dllcache\ctype.nls.new
- <SYSTEM32>\sorttbls.nls.new
- <SYSTEM32>\dllcache\sorttbls.nls.new
- <SYSTEM32>\dllcache\sortkey.nls.new
- <SYSTEM32>\dllcache\c_1257.nls.new
- <SYSTEM32>\dllcache\c_1254.nls.new
- <SYSTEM32>\sortkey.nls.new
- <SYSTEM32>\ctype.nls.new
- %WINDIR%\LastGood\TMP12.tmp
- <SYSTEM32>\SET11.tmp
- <SYSTEM32>\SET14.tmp
- %WINDIR%\Temp\OLD13.tmp
- <SYSTEM32>\SETE.tmp
- %WINDIR%\Temp\OLDD.tmp
- %WINDIR%\Temp\OLD10.tmp
- %WINDIR%\LastGood\TMPF.tmp
- %WINDIR%\LastGood\TMP18.tmp
- <SYSTEM32>\dllcache\c_1251.nls.new
- <SYSTEM32>\SET1A.tmp
- %WINDIR%\Temp\OLD19.tmp
- %WINDIR%\Temp\OLD16.tmp
- %WINDIR%\LastGood\TMP15.tmp
- <SYSTEM32>\SET17.tmp
- <SYSTEM32>\dllcache\c_1250.nls.new
- %TEMP%\IXP000.TMP\Sseriff.fon
- %TEMP%\IXP000.TMP\kbdhela3.dll
- %TEMP%\IXP000.TMP\kbdhela2.dll
- %TEMP%\IXP000.TMP\kbdhu1.dll
- %TEMP%\IXP000.TMP\kbdhu.dll
- %TEMP%\IXP000.TMP\kbdhe.dll
- %TEMP%\IXP000.TMP\kbdgr1.dll
- %TEMP%\IXP000.TMP\kbdhe319.dll
- %TEMP%\IXP000.TMP\kbdhe220.dll
- %TEMP%\IXP000.TMP\kbdlt1.dll
- %TEMP%\IXP000.TMP\kbdlt.dll
- %TEMP%\IXP000.TMP\kbdlv1.dll
- %TEMP%\IXP000.TMP\kbdlv.dll
- %TEMP%\IXP000.TMP\kbdir.dll
- %TEMP%\IXP000.TMP\kbdic.dll
- %TEMP%\IXP000.TMP\kbdit142.dll
- %TEMP%\IXP000.TMP\kbdit.dll
- %TEMP%\IXP000.TMP\kbdcr.dll
- %TEMP%\IXP000.TMP\kbdbene.dll
- %TEMP%\IXP000.TMP\kbdcz1.dll
- %TEMP%\IXP000.TMP\kbdcz.dll
- %TEMP%\IXP000.TMP\fontinst.inf
- %TEMP%\IXP000.TMP\NT4_Euro.inf
- %TEMP%\IXP000.TMP\kbdycl.dll
- %TEMP%\IXP000.TMP\fontinst.exe
- %TEMP%\IXP000.TMP\kbdfr.dll
- %TEMP%\IXP000.TMP\kbdfo.dll
- %TEMP%\IXP000.TMP\kbdgr.dll
- %TEMP%\IXP000.TMP\kbdgkl.dll
- %TEMP%\IXP000.TMP\kbdda.dll
- %TEMP%\IXP000.TMP\kbdcz2.dll
- %TEMP%\IXP000.TMP\kbdfi.dll
- %TEMP%\IXP000.TMP\kbdest.dll
- %TEMP%\IXP000.TMP\kbdmac.dll
- %TEMP%\IXP000.TMP\cour.ttf
- %TEMP%\IXP000.TMP\ariali.ttf
- %TEMP%\IXP000.TMP\courbi.ttf
- %TEMP%\IXP000.TMP\courbd.ttf
- %TEMP%\IXP000.TMP\timesi.ttf
- %TEMP%\IXP000.TMP\kbdbe.dll
- %TEMP%\IXP000.TMP\arialbi.ttf
- %TEMP%\IXP000.TMP\arialbd.ttf
- %TEMP%\IXP000.TMP\sserifeg.fon
- %TEMP%\IXP000.TMP\sserifee.fon
- %TEMP%\IXP000.TMP\sserifet.fon
- %TEMP%\IXP000.TMP\sserifer.fon
- %TEMP%\IXP000.TMP\ssee1257.fon
- %TEMP%\IXP000.TMP\couri.ttf
- %TEMP%\IXP000.TMP\Sserife.fon
- %TEMP%\IXP000.TMP\ssef1257.fon
- %TEMP%\IXP000.TMP\kbdsf.dll
- %TEMP%\IXP000.TMP\kbdpo.dll
- %TEMP%\IXP000.TMP\kbdsl.dll
- %TEMP%\IXP000.TMP\kbdsg.dll
- %TEMP%\IXP000.TMP\kbdno.dll
- %TEMP%\IXP000.TMP\kbdne.dll
- %TEMP%\IXP000.TMP\kbdpl1.dll
- %TEMP%\IXP000.TMP\kbdpl.dll
- %TEMP%\IXP000.TMP\kbduk.dll
- %TEMP%\IXP000.TMP\kbdtuq.dll
- %TEMP%\IXP000.TMP\kbdycc.dll
- %TEMP%\IXP000.TMP\kbdusx.dll
- %TEMP%\IXP000.TMP\kbdsp.dll
- %TEMP%\IXP000.TMP\kbdsl1.dll
- %TEMP%\IXP000.TMP\kbdtuf.dll
- %TEMP%\IXP000.TMP\kbdsw.dll
Удаляет следующие файлы:
- <SYSTEM32>\ctype.nls
- <SYSTEM32>\c_1257.nls
- <SYSTEM32>\sorttbls.nls
- <SYSTEM32>\sortkey.nls
- <SYSTEM32>\c_1254.nls
- <SYSTEM32>\c_1251.nls
- <SYSTEM32>\c_1250.nls
- <SYSTEM32>\c_1253.nls
- <SYSTEM32>\c_1252.nls
Перемещает следующие файлы:
- %WINDIR%\LastGood\TMP15.tmp в %WINDIR%\LastGood\system32\ctype.nls
- %WINDIR%\LastGood\TMP12.tmp в %WINDIR%\LastGood\system32\c_1257.nls
- %WINDIR%\LastGood\TMP18.tmp в %WINDIR%\LastGood\system32\sortkey.nls
- %WINDIR%\LastGood\TMP1E.tmp в %WINDIR%\LastGood\system32\KBDDA.DLL
- %WINDIR%\LastGood\TMP1B.tmp в %WINDIR%\LastGood\system32\sorttbls.nls
- %WINDIR%\LastGood\TMP6.tmp в %WINDIR%\LastGood\system32\c_1251.nls
- %WINDIR%\LastGood\TMP3.tmp в %WINDIR%\LastGood\system32\c_1250.nls
- %WINDIR%\LastGood\TMP9.tmp в %WINDIR%\LastGood\system32\c_1252.nls
- %WINDIR%\LastGood\TMPF.tmp в %WINDIR%\LastGood\system32\c_1254.nls
- %WINDIR%\LastGood\TMPC.tmp в %WINDIR%\LastGood\system32\c_1253.nls
