Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zs4be9d974\apbin\config.ini
- %ProgramFiles%\realtek\realtek card reader\conf6216.rra
- %ProgramFiles%\realtek\realtek card reader\rscr6202.rra
- %ProgramFiles%\realtek\realtek card reader\rico618a.rra
- <DRIVERS>\rtsp6158.rra
- %ProgramFiles%\realtek\realtek card reader\sdrt6144.rra
- %ProgramFiles%\realtek\realtek card reader\rtsp613a.rra
- %ProgramFiles%\realtek\realtek card reader\rtsp5fdc.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu4e69.rra
- %ProgramFiles%\realtek\realtek card reader\rtsp5fd1.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa4eb9.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt4eaf.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri4ea5.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd4e9b.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx4e9b.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font4e9b.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\dotn4e91.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr4ec3.rra
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\core4e91.rra
- %ProgramFiles%\realtek\realtek card reader\rmb6216.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data632f.rra
- %WINDIR%\inf\oem0.inf
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem0.cat
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu648d.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu645b.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse643d.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set6429.rra
- %ProgramFiles%\realtek\realtek card reader\sete6252.rra
- %ProgramFiles%\realtek\realtek card reader\sdrt6248.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data631b.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo6311.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc62ad.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset62a3.rra
- %ProgramFiles%\realtek\realtek card reader\revc6284.rra
- %ProgramFiles%\realtek\realtek card reader\revc627a.rra
- %ProgramFiles%\realtek\realtek card reader\disp625c.rra
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu6415.rra
- %TEMP%\4dfb.rra
- %TEMP%\{3193885d-73e0-457f-9c0d-d2ce965f2135}\setup.ini
- %TEMP%\{3193885d-73e0-457f-9c0d-d2ce965f2135}\_setup.dll
- %TEMP%\7zs4be9d974\setup.iss
- %TEMP%\7zs4be9d974\setup.isn
- %TEMP%\7zs4be9d974\setup.inx
- %TEMP%\7zs4be9d974\setup.ini
- %TEMP%\7zs4be9d974\readme.txt
- %TEMP%\7zs4be9d974\pkgconf.ini
- %TEMP%\7zs4be9d974\u3setup.iss
- %TEMP%\7zs4be9d974\layout.bin
- %TEMP%\7zs4be9d974\drvbin64\rtsp2stormsi.inf
- %TEMP%\7zs4be9d974\drvbin64\rtsp2stor64.cat
- %TEMP%\7zs4be9d974\drvbin32\rtsp2stormsi.inf
- %TEMP%\7zs4be9d974\drvbin32\rtsp2stor32.cat
- %TEMP%\7zs4be9d974\data2.cab
- %TEMP%\7zs4be9d974\data1.hdr
- %TEMP%\7zs4be9d974\data1.cab
- %TEMP%\7zs4be9d974\install.bat
- %TEMP%\7zs4be9d974\uninstall.bat
- %TEMP%\7zs4be9d974\u2setup.iss
- %TEMP%\7zs4be9d974\usetup.iss
- %TEMP%\7zs4be9d974\_setup.dll
- %TEMP%\7zs4be9d974\drvbin32\rtsp2storicon.dll
- %TEMP%\7zs4be9d974\utility\revcon64.exe
- %TEMP%\7zs4be9d974\utility\revcon32.exe
- %TEMP%\7zs4be9d974\setup.exe
- %TEMP%\7zs4be9d974\issetup.dll
- %TEMP%\7zs4be9d974\drvbin64\rtsp2storicon.dll
- %TEMP%\7zs4be9d974\drvbin64\rtsp2stor.sys
- %TEMP%\7zs4be9d974\drvbin32\sdrtcprm.dll
- %TEMP%\7zs4be9d974\drvbin32\rtsp2stor.sys
- %TEMP%\7zs4be9d974\utility\display.ico
- %TEMP%\7zs4be9d974\apbin64\rscrlib.dll
- %TEMP%\7zs4be9d974\apbin64\riconman.exe
- %TEMP%\7zs4be9d974\apbin32\rscrlib.dll
- %TEMP%\7zs4be9d974\apbin32\riconman.exe
- %TEMP%\7zs4be9d974\apbin\setehcikey.exe
- %TEMP%\7zs4be9d974\apbin\sdrtcprm.dll
- %TEMP%\7zs4be9d974\apbin\rmb.exe
- %WINDIR%\inf\oem0.pnf
- <SYSTEM32>\sda\sdrt6f9f.rra
Присваивает атрибут 'скрытый' для следующих файлов
- <SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem0.cat
Удаляет следующие файлы
- %ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll
Перемещает следующие файлы
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu4e69.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles%\realtek\realtek card reader\rmb6216.rra в %ProgramFiles%\realtek\realtek card reader\rmb.exe
- %ProgramFiles%\realtek\realtek card reader\sete6252.rra в %ProgramFiles%\realtek\realtek card reader\setehcikey.exe
- %ProgramFiles%\realtek\realtek card reader\disp625c.rra в %ProgramFiles%\realtek\realtek card reader\display.ico
- %ProgramFiles%\realtek\realtek card reader\revc627a.rra в %ProgramFiles%\realtek\realtek card reader\revcon32.exe
- %ProgramFiles%\realtek\realtek card reader\revc6284.rra в %ProgramFiles%\realtek\realtek card reader\revcon64.exe
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\uset62a3.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layo6311.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu648d.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data631b.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data632f.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu6415.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_set6429.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_setup.dll
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isse643d.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setu645b.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
- %ProgramFiles%\realtek\realtek card reader\conf6216.rra в %ProgramFiles%\realtek\realtek card reader\config.ini
- %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgc62ad.rra в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
- %ProgramFiles%\realtek\realtek card reader\rscr6202.rra в %ProgramFiles%\realtek\realtek card reader\rscrlib.dll
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt4eaf.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\core4e91.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\corecomp.ini
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\dotn4e91.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\dotnetinstaller.exe
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\font4e9b.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difx4e9b.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasd4e9b.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\vasdata.ini
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stri4ea5.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable-0009-english.ips
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa4eb9.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
- <DRIVERS>\rtsp6158.rra в <DRIVERS>\rtsp2stor.sys
- %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isr4ec3.rra в %TEMP%\{454e7e82-9fb2-405c-aee9-6a85e38da091}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres.dll
- %ProgramFiles%\realtek\realtek card reader\rtsp5fd1.rra в %ProgramFiles%\realtek\realtek card reader\rtsp2stor.sys
- %ProgramFiles%\realtek\realtek card reader\rtsp5fd1.rra в %ProgramFiles%\realtek\realtek card reader\rtsp2stor32.cat
- %ProgramFiles%\realtek\realtek card reader\rtsp5fdc.rra в %ProgramFiles%\realtek\realtek card reader\rtsp2storicon.dll
- %ProgramFiles%\realtek\realtek card reader\rtsp613a.rra в %ProgramFiles%\realtek\realtek card reader\rtsp2stormsi.inf
- %ProgramFiles%\realtek\realtek card reader\sdrt6144.rra в %ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll
- %ProgramFiles%\realtek\realtek card reader\rico618a.rra в %ProgramFiles%\realtek\realtek card reader\riconman.exe
- <SYSTEM32>\sda\sdrt6f9f.rra в <SYSTEM32>\sda\sdrtcprm.dll
Подменяет следующие файлы
- %ProgramFiles%\realtek\realtek card reader\rtsp5fd1.rra
- %ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll
Другое
Создает и запускает на исполнение
- '%TEMP%\7zs4be9d974\setup.exe'
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_dp_add RtsP2StorMSI.inf
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsP2StorMSI.inf PCI\VEN_10EC&DEV_5229&CC_FF00
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_dp_add RtsP2StorMSI.inf' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsP2StorMSI.inf PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
- '%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
