Trojan.MulDrop9.45601

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\08.bat
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str8.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isb.tmp
%ProgramFiles%\realtek\realtek card reader\conc.tmp
%ProgramFiles%\realtek\realtek card reader\rmbd.tmp
%ProgramFiles%\realtek\realtek card reader\sdre.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\cor6.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\dot7.tmp
%ProgramFiles%\realtek\realtek card reader\setf.tmp
%ProgramFiles%\realtek\realtek card reader\rts12.tmp
%ProgramFiles%\realtek\realtek card reader\rts13.tmp
%ProgramFiles%\realtek\realtek card reader\rts14.tmp
%ProgramFiles%\realtek\realtek card reader\sdr15.tmp
<DRIVERS>\rts16.tmp
%ProgramFiles%\realtek\realtek card reader\dis17.tmp
%ProgramFiles%\realtek\realtek card reader\rev18.tmp
%ProgramFiles%\realtek\realtek card reader\rsc10.tmp
%ProgramFiles%\realtek\realtek card reader\rtc11.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif5.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon4.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg3.tmp
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0415.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0416.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0418.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0419.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x041a.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x041b.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x041d.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x041e.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0414.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x041f.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0424.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x042d.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0804.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0816.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0c0c.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0c1a.ini
%TEMP%\1.tmp
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set2.tmp
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0421.ini
%ProgramFiles%\realtek\realtek card reader\rev19.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg1b.tmp
%WINDIR%\inf\oem0.pnf
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay1c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x035.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x036.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03a.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03b.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x033.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x034.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03f.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set42.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set43.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%WINDIR%\inf\oem0.inf
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x032.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x031.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x030.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set1f.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss20.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x021.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x022.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x023.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x024.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x025.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x026.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x028.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x029.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02a.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02b.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02c.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02d.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02e.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02f.tmp
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x027.tmp
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0413.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use1a.tmp
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0412.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\rtsp2storx.inf
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x041e.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x041f.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0421.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0424.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x042d.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0804.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0816.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x041b.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x041d.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0c0c.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\apbin\config.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\data1.cab
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\data1.hdr
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\data2.cab
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\detail.txt
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\rtsp2stor32.cat
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\rtsp2storx.inf
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0c1a.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\acip_deploy.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x041a.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0419.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0418.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0403.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0404.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0405.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0406.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0407.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0408.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0409.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x040a.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0402.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x040b.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x040e.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0410.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0411.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0412.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0413.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0414.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0415.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x0416.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\0x040c.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\rtsp2stor64.cat
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\layout.bin
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0410.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\pkgconf.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\issetup.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.exe
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\utility\revcon32.exe
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\utility\revcon64.exe
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\setup.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0402.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0403.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\rtsp2stor.sys
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\sdrtcprm.dll
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0404.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0407.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0408.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0409.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x040a.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x040b.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x040c.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x040e.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0405.ini
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0406.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\rtcrx64.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin64\rscricon.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\sdrtcprm.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\readme.txt
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\set.cmd
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.ini
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.inx
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.isn
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.iss
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.log
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\silentinstall.bat
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\prepackage.xml
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\u2setup.iss
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\usetup.iss
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\utility\display.ico
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\apbin\rmb.exe
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\apbin\sdrtcprm.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\apbin\setehcikey.exe
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\rscricon.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\rtcrx.dll
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\drvbin32\rtsp2stor.sys
%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\u3setup.iss
%TEMP%\{fc599412-a8ce-4476-9cef-aba01d71708c}\0x0411.ini
<SYSTEM32>\sda\sdr46.tmp

Удаляет следующие файлы

%ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll

Перемещает следующие файлы

%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set2.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x027.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0406.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x028.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0413.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x029.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0409.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02a.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040b.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c0c.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040c.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0407.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0408.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x02f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040e.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x030.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0421.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x031.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0410.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x032.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0411.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x033.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0412.ini
%ProgramFiles%\realtek\realtek card reader\rts12.tmp в %ProgramFiles%\realtek\realtek card reader\rtsp2stor.sys
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x034.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0414.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x036.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0416.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x037.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0816.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x038.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0418.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x039.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0419.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03a.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0c1a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041b.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0424.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041d.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x03f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041e.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x040.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041f.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x042d.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set42.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.inx
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x025.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x041a.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x026.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0405.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x024.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0404.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x023.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0804.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x022.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0403.ini
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fon4.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\fontdata.ini
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dif5.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\difxdata.ini
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\cor6.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\corecomp.ini
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\dot7.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\dotnetinstaller.exe
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\str8.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\stringtable_0x0409.ips
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isr9.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\isrt.dll
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\defa.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\default.pal
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isb.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\_isres_0x0409.dll
%ProgramFiles%\realtek\realtek card reader\conc.tmp в %ProgramFiles%\realtek\realtek card reader\config.ini
%ProgramFiles%\realtek\realtek card reader\rmbd.tmp в %ProgramFiles%\realtek\realtek card reader\rmb.exe
%ProgramFiles%\realtek\realtek card reader\sdre.tmp в %ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll
%ProgramFiles%\realtek\realtek card reader\setf.tmp в %ProgramFiles%\realtek\realtek card reader\setehcikey.exe
%ProgramFiles%\realtek\realtek card reader\rsc10.tmp в %ProgramFiles%\realtek\realtek card reader\rscricon.dll
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set43.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x035.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0415.ini
%ProgramFiles%\realtek\realtek card reader\rtc11.tmp в %ProgramFiles%\realtek\realtek card reader\rtcrx.dll
%ProgramFiles%\realtek\realtek card reader\rts14.tmp в %ProgramFiles%\realtek\realtek card reader\rtsp2storx.inf
<DRIVERS>\rts16.tmp в <DRIVERS>\rtsp2stor.sys
%ProgramFiles%\realtek\realtek card reader\dis17.tmp в %ProgramFiles%\realtek\realtek card reader\display.ico
%ProgramFiles%\realtek\realtek card reader\rev18.tmp в %ProgramFiles%\realtek\realtek card reader\revcon32.exe
%ProgramFiles%\realtek\realtek card reader\rev19.tmp в %ProgramFiles%\realtek\realtek card reader\revcon64.exe
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\use1a.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\usetup.iss
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg1b.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgconf.ini
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\lay1c.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\layout.bin
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1d.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.hdr
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\dat1e.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\data1.cab
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\set1f.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\setup.exe
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\iss20.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\issetup.dll
%ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x021.tmp в %ProgramFiles%\installshield installation information\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\0x0402.ini
%TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkg3.tmp в %TEMP%\{734e544b-cd81-437d-805b-614340a8ed07}\{5bc2b5ab-80de-4e83-b8cf-426902051d0a}\pkgutility.dll
%ProgramFiles%\realtek\realtek card reader\rts13.tmp в %ProgramFiles%\realtek\realtek card reader\rtsp2stor32.cat
<SYSTEM32>\sda\sdr46.tmp в <SYSTEM32>\sda\sdrtcprm.dll

Подменяет следующие файлы

%ProgramFiles%\realtek\realtek card reader\sdrtcprm.dll

Другое

Создает и запускает на исполнение

'%TEMP%\7zsc4e8ad74\cardreader_realtek_10.0.10240.29090_w7x64\setup.exe'
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' dp_add RtsP2StorX.inf
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsP2StorX.inf PCI\VEN_10EC&DEV_5229&CC_FF00
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00
'<SYSTEM32>\rundll32.exe' "%TEMP%\{734E544B-CD81-437D-805B-614340A8ED07}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' dp_add RtsP2StorX.inf' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_update RtsP2StorX.inf PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)
'%ProgramFiles%\realtek\realtek card reader\revcon32.exe' RS_remove PCI\VEN_10EC&DEV_5229&CC_FF00' (со скрытым окном)

Запускает на исполнение

'<SYSTEM32>\rundll32.exe' "%TEMP%\{734E544B-CD81-437D-805B-614340A8ED07}\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}\PkgUtility.dll" GetOSVersion

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней