Trojan.MulDrop8.23342

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0402.ini
%ProgramFiles%\Realtek\Realtek Card Reader\rev16.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\use17.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\pkg18.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\dot7.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
%ProgramFiles%\Realtek\Realtek Card Reader\Dis14.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\rev15.tmp
<DRIVERS>\Rts13.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\rts12.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\Rts11.tmp
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0816.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0c0c.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0c1a.ini
%TEMP%\1.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set2.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Pkg3.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Fon4.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\DIF5.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\lay19.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\cor6.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\isr9.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\defA.tmp
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\_isB.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\conC.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\RmbD.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\SetE.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\RsCF.tmp
%ProgramFiles%\Realtek\Realtek Card Reader\Rts10.tmp
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0804.ini
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Str8.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\dat1A.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\dat1B.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02E.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02F.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x030.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x031.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x032.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x033.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x034.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x035.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x036.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x038.tmp
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x042d.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x039.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03A.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03B.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03C.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03D.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03E.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set3F.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set40.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02D.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x020.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02C.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x01F.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set1C.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\ISS1D.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x01E.tmp
%WINDIR%\inf\oem3.inf
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02A.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x021.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x022.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x023.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x024.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x025.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x026.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x027.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x028.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x029.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02B.tmp
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x037.tmp
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0424.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0412.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0421.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0424.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x042d.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0804.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0816.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0c0c.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0c1a.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\ACIP_Deploy.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x040e.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\APBin\config.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\data1.hdr
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\data2.cab
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Detail.txt
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin32\RtsPer.inf
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin32\rtsper32.cat
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin64\RtsPer.inf
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin64\rtsper64.cat
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\layout.bin
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x041e.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x041f.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x041d.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x041b.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x041a.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0404.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0405.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0406.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0407.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0408.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0409.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x040a.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x040b.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\pkgconf.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\data1.cab
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x040c.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0411.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0412.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0413.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0414.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0415.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0416.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0418.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0419.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0403.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\0x0410.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Prepackage.xml
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\readme.txt
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\setup.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0407.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0408.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0409.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x040a.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x040b.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x040c.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x040e.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0410.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0411.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0413.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0421.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0414.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0415.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0416.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0418.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0419.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x041a.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x041b.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x041d.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x041e.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0406.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin32\RsCRIcon.dll
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0405.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\APBin\SetEHCIKey.exe
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\setup.inx
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\setup.iss
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\SilentInstall.bat
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Success.tag
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\u2setup.iss
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\u3setup.iss
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\usetup.iss
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Utility\Display.ico
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\APBin\Rmb.exe
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x041f.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0403.ini
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin32\RtsPer.sys
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin64\RsCRIcon.dll
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\DrvBin64\RtsPer.sys
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\ISSetup.dll
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\setup.exe
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Utility\revcon32.exe
%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\Utility\revcon64.exe
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\setup.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0402.ini
%TEMP%\{D2BF7BD0-F89C-4D08-A868-B7AC6247EBFE}\0x0404.ini
%WINDIR%\inf\oem3.PNF

Перемещает следующие файлы:

%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set2.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.inx
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x023.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0405.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x024.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0406.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x025.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0413.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x026.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0409.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x027.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x040b.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x028.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0c0c.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x029.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x040c.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02A.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0407.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02B.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0408.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02C.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x040e.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02D.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0421.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02E.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0410.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x02F.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0411.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x031.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0414.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set3F.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.inx
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x032.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0415.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x033.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0416.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x034.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0816.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x035.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0418.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x036.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0419.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x037.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0c1a.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x038.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x041b.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x039.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0424.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03A.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x040a.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03B.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x041d.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03C.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x041e.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03D.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x041f.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x03E.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x042d.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x022.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x041a.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x030.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0412.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x021.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0404.ini
%ProgramFiles%\Realtek\Realtek Card Reader\Rts10.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\RtsPer.inf
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Pkg3.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Fon4.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\FontData.ini
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\DIF5.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\DIFxData.ini
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\cor6.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\corecomp.ini
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\dot7.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\dotnetinstaller.exe
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\Str8.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\StringTable_0x0409.ips
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\isr9.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\isrt.dll
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\defA.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\default.pal
%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\_isB.tmp в %TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\_isres_0x0409.dll
%ProgramFiles%\Realtek\Realtek Card Reader\conC.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\config.ini
%ProgramFiles%\Realtek\Realtek Card Reader\RmbD.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\Rmb.exe
%ProgramFiles%\Realtek\Realtek Card Reader\SetE.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\SetEHCIKey.exe
%ProgramFiles%\Realtek\Realtek Card Reader\RsCF.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\RsCRIcon.dll
%ProgramFiles%\Realtek\Realtek Card Reader\Rts11.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\RtsPer.sys
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x01F.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0403.ini
%ProgramFiles%\Realtek\Realtek Card Reader\rts12.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\rtsper32.cat
<DRIVERS>\Rts13.tmp в <DRIVERS>\RtsPer.sys
%ProgramFiles%\Realtek\Realtek Card Reader\Dis14.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\Display.ico
%ProgramFiles%\Realtek\Realtek Card Reader\rev15.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\revcon32.exe
%ProgramFiles%\Realtek\Realtek Card Reader\rev16.tmp в %ProgramFiles%\Realtek\Realtek Card Reader\revcon64.exe
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\use17.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\usetup.iss
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\pkg18.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\pkgconf.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\lay19.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\layout.bin
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\dat1A.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\data1.hdr
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\dat1B.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\data1.cab
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set1C.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.exe
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\ISS1D.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\ISSetup.dll
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x01E.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0402.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x020.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\0x0804.ini
%ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\set40.tmp в %ProgramFiles%\InstallShield Installation Information\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\setup.ini

Другое:

Создает и запускает на исполнение:

'%TEMP%\7zSC3B55362\CardReader_Realtek_10.0.16299.21304_W10x64\setup.exe'
'%ProgramFiles%\Realtek\Realtek Card Reader\revcon32.exe' dp_add RtsPer.inf
'%ProgramFiles%\Realtek\Realtek Card Reader\revcon32.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5227&CC_FF00
'%ProgramFiles%\Realtek\Realtek Card Reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5227&CC_FF00
'%ProgramFiles%\Realtek\Realtek Card Reader\revcon32.exe' RS_update RtsPer.inf PCI\VEN_10EC&DEV_5249&CC_FF00

Запускает на исполнение:

'<SYSTEM32>\rundll32.exe' "%TEMP%\{970861CD-E1E1-4391-91C9-1954B2438F8A}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней