Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'RWipeD' = '%TEMP%\RarSFX0\App\RWipe&Clean\RWipeD.exe'
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKLM>\Software\Ghisler\Total Commander]
- [<HKLM>\SOFTWARE\Microsoft\Windows Mail]
- [<HKLM>\SOFTWARE\Microsoft\Windows Live Mail]
- [<HKLM>\SOFTWARE\FlashFXP]
- [<HKLM>\SOFTWARE\CyberLink\PowerDVD]
- [<HKLM>\SOFTWARE\FileZilla Client]
- [<HKLM>\SOFTWARE\FileZilla]
- %APPDATA%\R-Wipe&Clean\icons\169.bmp
- %APPDATA%\R-Wipe&Clean\icons\168.bmp
- %APPDATA%\R-Wipe&Clean\icons\167.bmp
- %APPDATA%\R-Wipe&Clean\icons\170.bmp
- %APPDATA%\R-Wipe&Clean\icons\173.bmp
- %APPDATA%\R-Wipe&Clean\icons\172.bmp
- %APPDATA%\R-Wipe&Clean\icons\171.bmp
- %APPDATA%\R-Wipe&Clean\icons\162.bmp
- %APPDATA%\R-Wipe&Clean\icons\161.bmp
- %APPDATA%\R-Wipe&Clean\icons\160.bmp
- %APPDATA%\R-Wipe&Clean\icons\163.bmp
- %APPDATA%\R-Wipe&Clean\icons\166.bmp
- %APPDATA%\R-Wipe&Clean\icons\165.bmp
- %APPDATA%\R-Wipe&Clean\icons\164.bmp
- %APPDATA%\R-Wipe&Clean\icons\183.bmp
- %APPDATA%\R-Wipe&Clean\icons\182.bmp
- %APPDATA%\R-Wipe&Clean\icons\181.bmp
- %APPDATA%\R-Wipe&Clean\icons\184.bmp
- %APPDATA%\R-Wipe&Clean\icons\187.bmp
- %APPDATA%\R-Wipe&Clean\icons\186.bmp
- %APPDATA%\R-Wipe&Clean\icons\185.bmp
- %APPDATA%\R-Wipe&Clean\icons\176.bmp
- %APPDATA%\R-Wipe&Clean\icons\175.bmp
- %APPDATA%\R-Wipe&Clean\icons\174.bmp
- %APPDATA%\R-Wipe&Clean\icons\177.bmp
- %APPDATA%\R-Wipe&Clean\icons\180.bmp
- %APPDATA%\R-Wipe&Clean\icons\179.bmp
- %APPDATA%\R-Wipe&Clean\icons\178.bmp
- %APPDATA%\R-Wipe&Clean\icons\159.bmp
- %APPDATA%\R-Wipe&Clean\icons\140.bmp
- %APPDATA%\R-Wipe&Clean\icons\139.bmp
- %APPDATA%\R-Wipe&Clean\icons\138.bmp
- %APPDATA%\R-Wipe&Clean\icons\141.bmp
- %APPDATA%\R-Wipe&Clean\icons\144.bmp
- %APPDATA%\R-Wipe&Clean\icons\143.bmp
- %APPDATA%\R-Wipe&Clean\icons\142.bmp
- %APPDATA%\R-Wipe&Clean\icons\133.bmp
- %APPDATA%\R-Wipe&Clean\icons\132.bmp
- %APPDATA%\R-Wipe&Clean\icons\131.bmp
- %APPDATA%\R-Wipe&Clean\icons\134.bmp
- %APPDATA%\R-Wipe&Clean\icons\137.bmp
- %APPDATA%\R-Wipe&Clean\icons\136.bmp
- %APPDATA%\R-Wipe&Clean\icons\135.bmp
- %APPDATA%\R-Wipe&Clean\icons\154.bmp
- %APPDATA%\R-Wipe&Clean\icons\153.bmp
- %APPDATA%\R-Wipe&Clean\icons\152.bmp
- %APPDATA%\R-Wipe&Clean\icons\155.bmp
- %APPDATA%\R-Wipe&Clean\icons\158.bmp
- %APPDATA%\R-Wipe&Clean\icons\157.bmp
- %APPDATA%\R-Wipe&Clean\icons\156.bmp
- %APPDATA%\R-Wipe&Clean\icons\147.bmp
- %APPDATA%\R-Wipe&Clean\icons\146.bmp
- %APPDATA%\R-Wipe&Clean\icons\145.bmp
- %APPDATA%\R-Wipe&Clean\icons\148.bmp
- %APPDATA%\R-Wipe&Clean\icons\151.bmp
- %APPDATA%\R-Wipe&Clean\icons\150.bmp
- %APPDATA%\R-Wipe&Clean\icons\149.bmp
- %APPDATA%\R-Wipe&Clean\icons\226.bmp
- %APPDATA%\R-Wipe&Clean\icons\225.bmp
- %APPDATA%\R-Wipe&Clean\icons\224.bmp
- %APPDATA%\R-Wipe&Clean\icons\227.bmp
- %APPDATA%\R-Wipe&Clean\icons\230.bmp
- %APPDATA%\R-Wipe&Clean\icons\229.bmp
- %APPDATA%\R-Wipe&Clean\icons\228.bmp
- %APPDATA%\R-Wipe&Clean\icons\219.bmp
- %APPDATA%\R-Wipe&Clean\icons\218.bmp
- %APPDATA%\R-Wipe&Clean\icons\217.bmp
- %APPDATA%\R-Wipe&Clean\icons\220.bmp
- %APPDATA%\R-Wipe&Clean\icons\223.bmp
- %APPDATA%\R-Wipe&Clean\icons\222.bmp
- %APPDATA%\R-Wipe&Clean\icons\221.bmp
- %APPDATA%\R-Wipe&Clean\icons\240.bmp
- %APPDATA%\R-Wipe&Clean\icons\239.bmp
- %APPDATA%\R-Wipe&Clean\icons\238.bmp
- %APPDATA%\R-Wipe&Clean\icons\241.bmp
- %APPDATA%\R-Wipe&Clean\icons\244.bmp
- %APPDATA%\R-Wipe&Clean\icons\243.bmp
- %APPDATA%\R-Wipe&Clean\icons\242.bmp
- %APPDATA%\R-Wipe&Clean\icons\233.bmp
- %APPDATA%\R-Wipe&Clean\icons\232.bmp
- %APPDATA%\R-Wipe&Clean\icons\231.bmp
- %APPDATA%\R-Wipe&Clean\icons\234.bmp
- %APPDATA%\R-Wipe&Clean\icons\237.bmp
- %APPDATA%\R-Wipe&Clean\icons\236.bmp
- %APPDATA%\R-Wipe&Clean\icons\235.bmp
- %APPDATA%\R-Wipe&Clean\icons\216.bmp
- %APPDATA%\R-Wipe&Clean\icons\197.bmp
- %APPDATA%\R-Wipe&Clean\icons\196.bmp
- %APPDATA%\R-Wipe&Clean\icons\195.bmp
- %APPDATA%\R-Wipe&Clean\icons\198.bmp
- %APPDATA%\R-Wipe&Clean\icons\201.bmp
- %APPDATA%\R-Wipe&Clean\icons\200.bmp
- %APPDATA%\R-Wipe&Clean\icons\199.bmp
- %APPDATA%\R-Wipe&Clean\icons\190.bmp
- %APPDATA%\R-Wipe&Clean\icons\189.bmp
- %APPDATA%\R-Wipe&Clean\icons\188.bmp
- %APPDATA%\R-Wipe&Clean\icons\191.bmp
- %APPDATA%\R-Wipe&Clean\icons\194.bmp
- %APPDATA%\R-Wipe&Clean\icons\193.bmp
- %APPDATA%\R-Wipe&Clean\icons\192.bmp
- %APPDATA%\R-Wipe&Clean\icons\211.bmp
- %APPDATA%\R-Wipe&Clean\icons\210.bmp
- %APPDATA%\R-Wipe&Clean\icons\209.bmp
- %APPDATA%\R-Wipe&Clean\icons\212.bmp
- %APPDATA%\R-Wipe&Clean\icons\215.bmp
- %APPDATA%\R-Wipe&Clean\icons\214.bmp
- %APPDATA%\R-Wipe&Clean\icons\213.bmp
- %APPDATA%\R-Wipe&Clean\icons\204.bmp
- %APPDATA%\R-Wipe&Clean\icons\203.bmp
- %APPDATA%\R-Wipe&Clean\icons\202.bmp
- %APPDATA%\R-Wipe&Clean\icons\205.bmp
- %APPDATA%\R-Wipe&Clean\icons\208.bmp
- %APPDATA%\R-Wipe&Clean\icons\207.bmp
- %APPDATA%\R-Wipe&Clean\icons\206.bmp
- %APPDATA%\R-Wipe&Clean\icons\130.bmp
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\RWipe1.pbl
- %TEMP%\RarSFX0\App\AppInfo\appinfo.ini
- %TEMP%\RarSFX0\App\RWipe&Clean\rwipe.ico
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\RWipe1.phl
- %TEMP%\RarSFX0\App\AppInfo\appicon_48.png
- %TEMP%\RarSFX0\App\AppInfo\appicon_32.png
- %TEMP%\RarSFX0\App\AppInfo\appicon_16.png
- %TEMP%\RarSFX0\App\RWipe&Clean\RWipeD.exe
- %TEMP%\RarSFX0\RWipe&CleanPortable.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcTaskService.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RWipeInst.exe
- %TEMP%\RarSFX0\App\AppInfo\appicon.ico
- %TEMP%\RarSFX0\App\RWipe&Clean\RWKbdD.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RWipeRun.exe
- %TEMP%\RarSFX0\Data\RWipe&Clean\FavCookies2
- %TEMP%\nso3.tmp\FindProcDLL.dll
- %TEMP%\nso3.tmp\registry.dll
- %TEMP%\RarSFX0\Data\RWipe&Clean\FfxFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\KMeleonFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\GoogleChromeFavCookies2
- %TEMP%\RarSFX0\Data\RWipe&Clean\FlockFavCookies1
- %TEMP%\RarSFX0\Other\Help\images\help_logo_top.png
- %TEMP%\RarSFX0\Other\Help\images\help_background_header.png
- %TEMP%\RarSFX0\Other\Help\images\help_background_footer.png
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\RWipe1.pwl
- %TEMP%\RarSFX0\RWipe&CleanPortable.ini
- %TEMP%\nst2.tmp
- %TEMP%\RarSFX0\App\RWipe&Clean\eula.txt
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcRun.exe
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\SafFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\OperaFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\NsFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\SeaMonkeyFavCookies1
- %TEMP%\RarSFX0\Other\Help\style.css
- %TEMP%\RarSFX0\App\RWipe&Clean\RWipe&Clean.chm
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\SongbirdFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\FlockFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\FfxFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\FavCookies2
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\GoogleChromeFavCookies2
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\MozFavCookies1
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\KonquerorFavCookies
- %TEMP%\RarSFX0\App\DefaultData\RWipe&Clean\KMeleonFavCookies1
- %TEMP%\RarSFX0\App\RWipe&Clean\_rwipeinst.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RWKbdH.dll
- %TEMP%\RarSFX0\App\RWipe&Clean\RWipe.dll
- %TEMP%\RarSFX0\App\RWipe&Clean\RPrivSvc.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcNtSrv.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcLkRen.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RWCClean.exe
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcProcs.dll
- %TEMP%\RarSFX0\App\AppInfo\Thumbs.db
- %TEMP%\RarSFX0\Other\Help\images\Thumbs.db
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcPub32.dll
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcSh64.dll
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcSh32.dll
- %TEMP%\RarSFX0\App\RWipe&Clean\RwcPub64.dll
- %APPDATA%\R-Wipe&Clean\icons\111.bmp
- %APPDATA%\R-Wipe&Clean\icons\110.bmp
- %APPDATA%\R-Wipe&Clean\icons\109.bmp
- %APPDATA%\R-Wipe&Clean\icons\112.bmp
- %APPDATA%\R-Wipe&Clean\icons\115.bmp
- %APPDATA%\R-Wipe&Clean\icons\114.bmp
- %APPDATA%\R-Wipe&Clean\icons\113.bmp
- %APPDATA%\R-Wipe&Clean\icons\104.bmp
- %APPDATA%\R-Wipe&Clean\icons\103.bmp
- %APPDATA%\R-Wipe&Clean\icons\102.bmp
- %APPDATA%\R-Wipe&Clean\icons\105.bmp
- %APPDATA%\R-Wipe&Clean\icons\108.bmp
- %APPDATA%\R-Wipe&Clean\icons\107.bmp
- %APPDATA%\R-Wipe&Clean\icons\106.bmp
- %APPDATA%\R-Wipe&Clean\icons\125.bmp
- %APPDATA%\R-Wipe&Clean\icons\124.bmp
- %APPDATA%\R-Wipe&Clean\icons\123.bmp
- %APPDATA%\R-Wipe&Clean\icons\126.bmp
- %APPDATA%\R-Wipe&Clean\icons\129.bmp
- %APPDATA%\R-Wipe&Clean\icons\128.bmp
- %APPDATA%\R-Wipe&Clean\icons\127.bmp
- %APPDATA%\R-Wipe&Clean\icons\118.bmp
- %APPDATA%\R-Wipe&Clean\icons\117.bmp
- %APPDATA%\R-Wipe&Clean\icons\116.bmp
- %APPDATA%\R-Wipe&Clean\icons\119.bmp
- %APPDATA%\R-Wipe&Clean\icons\122.bmp
- %APPDATA%\R-Wipe&Clean\icons\121.bmp
- %APPDATA%\R-Wipe&Clean\icons\120.bmp
- %APPDATA%\R-Wipe&Clean\icons\101.bmp
- %TEMP%\RarSFX0\Data\RWipe&Clean\SongbirdFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\SeaMonkeyFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\SafFavCookies1
- %APPDATA%\R-Wipe&Clean\FavCookies2
- %APPDATA%\R-Wipe&Clean\GoogleChromeFavCookies2
- %APPDATA%\R-Wipe&Clean\FlockFavCookies1
- %APPDATA%\R-Wipe&Clean\FfxFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\NsFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\MozFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\KonquerorFavCookies
- %TEMP%\RarSFX0\Data\RWipe&Clean\OperaFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&Clean\RWipe1.pwl
- %TEMP%\RarSFX0\Data\RWipe&Clean\RWipe1.phl
- %TEMP%\RarSFX0\Data\RWipe&Clean\RWipe1.pbl
- %APPDATA%\R-Wipe&Clean\SeaMonkeyFavCookies1
- %APPDATA%\R-Wipe&Clean\SafFavCookies1
- %APPDATA%\R-Wipe&Clean\RWipe1.pwl
- %APPDATA%\R-Wipe&Clean\SongbirdFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&CleanPortable.ini
- %TEMP%\nso3.tmp\newadvsplash.dll
- %TEMP%\nso3.tmp\splash.bmp
- %APPDATA%\R-Wipe&Clean\MozFavCookies1
- %APPDATA%\R-Wipe&Clean\KonquerorFavCookies
- %APPDATA%\R-Wipe&Clean\KMeleonFavCookies1
- %APPDATA%\R-Wipe&Clean\NsFavCookies1
- %APPDATA%\R-Wipe&Clean\RWipe1.phl
- %APPDATA%\R-Wipe&Clean\RWipe1.pbl
- %APPDATA%\R-Wipe&Clean\OperaFavCookies1
- %TEMP%\RarSFX0\Data\RWipe&CleanPortable.ini
- %TEMP%\RarSFX0\App\AppInfo\Thumbs.db
- %TEMP%\RarSFX0\Other\Help\images\Thumbs.db
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'CRWipeCleanMainFrame' WindowName: 'R-Wipe&Clean - EVALUATION VERSION'
- ClassName: 'RWipeDaemonWndClass' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '#32770' WindowName: 'Deleting and wiping...'
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'CRWipeCleanMainFrame' WindowName: 'R-Wipe&Clean'
- ClassName: '#32770' WindowName: 'Wiping...'
- '%TEMP%\RarSFX0\App\RWipe&Clean\RWipeRun.exe'
- '%TEMP%\RarSFX0\RWipe&CleanPortable.exe'